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© Apparatus for carrying out financial transactions via a facsimile machine. 



© Financial transactions between buyers and sell- 
ers are carried out using at least one facsimile 
machine (102). Each buyer and seller is provided 
with an identification module, i.e. a card or a me- 
chanical key containing an integrated circuit "chip", 
that is inserted into a receptacle (118,128) provided 
in the facsimile machine. The machine contains cir- 
cuitry to communicate bidirectionally with the iden- 
tification module and, via telephone lines, with mod- 
ules provided at other facsimile machines. In a 



"local" mode, buyer and seller modules commu- 
nicate with each other at a single facsimile machine 
which authorizes and carries out a requested trans- 
action, and prints out a transaction record. In a 
"remote" mode, modules at remote facsimile ma- 
chines communicate with each other via telephone 
lines, with a transaction record being printed at each 
end. in an "upload" mode, transaction data accu- 
mulated at each machine is transmitted to the au- 
thorizing institution. 
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APPARATUS FOR CARRYING OUT FINANCIAL TRANSACTIONS VIA A FACSIMILE MACHINE 



CrQ ss References to Related Applications 

This invention is related to the subject matter 
of U.S. Pats. No. 4,305,059; 4,341,951; 4,454,414 
and 4,625,276, all assigned to the assignee of this 
invention. 

Technical Field 

This invention relates generally to electronic 
funds transfer systems, and more particularly to a 
unique electronic funds transfer system incorporat- 
ing facsimile machines both to transfer funds data 
between buyers and sellers at a common point of 
sale or at remote locations and to print transaction 
records including facsimile signatures of the par- 
ties. 

Background Art 

Spurred by the pressures of paper-based 
checking which is costly and time consuming for 
financial institutions and further in light of the in- 
convenience of maintaining accurate accounting in 
cash transactions, institutions have sought out and 
experimented with various electronic means of ex- 
tending and speeding up account accessibility. To 
this end and to improve record keeping as well as 
to reduce flow of actual cash, computer technology 
has been applied to develop electronic funds trans- 
fer, which is essentially a process of value ex- 
change achieved through electronic devices. Exam- 
ples of electronic funds transfer equipment that 
have become used on a substantial basis in recent 
years are the Automated Clearing House (ACH), 
the Automated Teller Machine (ATM) and the point 
of sale system (POS). 

To eliminate the presence of a central com- 
puter in every transaction, there has been a trend 
toward off-line electronic funds transfer, that is, 
transfer of data between portable and resident 
units, with only periodic downloading of data to the 
central computer. In Mareno U.S. Pat. No. 
4,007,355, for example, cashless transactions are 
made between credit cards through a special inter- 
face located at each vendor station. Stuckert U.S. 
Pat. No. 4,277,837 is directed toward a cashless, 
off-line transaction system involving portable units 
that are carried by customers and adapted for use 
with data storage and transfer cards. 

The Mareno and Stuckert systems have par- 
ticular problems that have limited their widespread 
use in off-line electric funds transfer. In Mareno, no 
exchange of funds may be made arbitrarily be- 
cause the cards carried by each user, although 



having funds data storage capability, have no key- 
boards and require a special interface apparatus to 
be present at each transaction. In Stuckert, cards 
used with the portable terminals have no display; a 
5 separate portable terminal must be involved during 
each transaction. The user cannot continuously 
monitor his account, limiting the versatility of the 
system. 

These problems and others were solved by 
w Benton in U.S. Pat. No. 4,305,059 issued on Dec. 
8, 1981- disclosing a modular funds transfer sys- 
tem wherein each user as well as vendor carries an 
identical portable module having a keyboard and a 
display. Funds are transferred between modules 
?s using a hard wire interface, and the account status 
stored in each module is updated following each 
transaction. In another patent to Benton Pat. No. 
4,341,951, printed vouchers are issued by the por- 
table module following each transaction. 
20 The Benton approach was further refined in 

U.S. Pat. No. 4,454,414 to provide bidirectional 
optical coupling between portable funds data trans- 
fer modules, including a "hand-shaking" protocol 
that enables funds transfer to be completed only if 
25 a number of criteria are satisfied. These criteria 
include an identification check following keyboard 
entry by the user of a secret number and examina- 
tion of the transaction amount to ensure that it falls 
within credit limits. Finally, in Benton et al. 
so 4,625,276, electronic funds data are transferred be- 
tween portable modules either directly in a local 
mode of operation or indirectly, via telephone lines, 
in a remote mode of operation. Transaction records 
are printed by an outboard printer or downloaded 
35 to a central computer. 

The system described in the aforementioned 
Benton et al. patents is capable of having a sub- 
stantial impact on the manner by which financial 
transactions are carried out, securely transferring 
40 funds between buyers and sellers while simulta- 
neously printing supporting documents. However, 
considerable dedicated apparatus including a 
modem and printer as well as portable modules are 
required to implement the system. The present 
45 invention is provided to reduce the cost of im- 
plementation, and to improve availability, of the 
system to buyers and sellers. 

There currently are more than two million fac- 
simile machines throughout the world, used exclu- 
50 sively for the transfer of documentary information 
between individual stations connected to any dial 
up telephone line. Such machines, with printer and 
keypad as well as a modem, are capable of trans- 
mitting and receiving graphical data, e.g., images 
as well as textual data. This invention is a modifica- 
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tion to and implementation of a conventional fac- 
simile machine to be operative in a transaction 
mode of operation for carrying out transactions 
between buyers and sellers. 

Disclosure of the Invention 



It accordingly is an object of the invention to 
provide electronic funds data transfer between local 
or remote parties to a transaction while printing 
transaction records for the parties. 

Another object of the invention is to provide a 
system for carrying out funds data transfer be- 
tween either local or remote parties to a transaction 
while printing individual, "mirrored", transaction 
records for the parties. 

Another object of the invention is to provide a 
system for carrying out funds data transfer be- 
tween buyers and sellers, and printing of transac- 
tion records including the signatures of the parties, 
all from data stored in data storage modules pro- 
vided thereto. 

A further object is to provide a system for 
carrying out financial transactions via a facsimile 
machine. 

Another object of the invention is to use at 
least one facsimile machine to carry out financial 
transactions between buyers and sellers at a com- 
mon location, in a local mode of operation, or at 
different locations, in a remote mode, and wherein 
mirrored transaction records are printed by the 
facsimile machine or machines. 

A further object is to provide a funds transfer 
system using at least one facsimile machine to 
establish bidirectional communications between 
portable identification modules carried by buyers 
and sellers. 

A still further object of the invention is to pro- 
vide a funds transfer system wherein buyers and 
sellers carry portable identification modules con- 
taining identification and account data, and fac- 
simile machines are used to transfer transaction 
data between the modules and to print transaction 
records. 

Yet another object of the invention is to provide 
a funds transfer system wherein buyers and sellers 
carry portable identification modules containing 
identification and account data, and facsimile ma- 
chines are used to transfer transaction data be- 
tween the modules and to a central computer, and 
mirrored transaction records are printed for com- 
pleted transactions. 

Another object is to provide a funds transfer 
system using facsimile machines to transfer data 
between identification modules provided to buyers 
and sellers, wherein a processor provided with 
each facsimile machine controls communication 
between modules, authorizes transactions and up- 



dates data stored in each module in accordance 
with the transaction. 

Yet another object is to provide a system for 
carrying out transactions between buyers and sell- 
5 ers wherein portable identification modules carried 
by each communicate bidirectionally via facsimile 
machines and wherein transaction records includ- 
ing facsimile signatures of the buyers and sellers 
are printed following completion of the transactions. 
w A further object of the invention is to provide a 

keyboard controlled, electronic funds transfer sys- 
tem for carrying out transactions between buyers 
and sellers, wherein identification modules pro- 
vided to the buyers and sellers store transaction 
75 records, and wherein account information is acces- 
sed from the modules in response to a relatively 
small number of keystrokes. 

To satisfy these and other objectives, an elec- 
tronic funds transfer system for carrying out finan- 
20 cial transactions between local or remote users, in 
accordance with one aspect of the invention, com- 
prises at least one facsimile machine and portable 
identification modules, each module having an in- 
formation storage means therein storing first data 
25 corresponding at least to a seller/buyer identifica- 
tion number, transaction amounts, transaction 
times, an account balance and a seller/buyer signa- 
ture. The facsimile machine comprises, convention- 
ally, first means including a document printer for 
30 printing data on a recording medium, input means 
including a keyboard for receiving second data 
manually entered thereon, and means for format- 
ting the first and second data. The facsimile ma- 
chine further includes means for transmitting for- 
35 matted data including text and graphics via tele- 
phone lines or other communication medium to 
other facsimile machines. Provided in each fac- 
simile machine are means for receiving formatted 
data incoming on the communication medium from 
40 the other facsimile machines and means for print- 
ing on the recording medium information including 
seller/buyer facsimile signatures corresponding to 
the formatted data. 

In accordance with an important aspect of the 
45 invention, the system further includes an interface 
means incorporated with the facsimile machine for 
receiving the identification module. The interface 
means includes means for writing the second data 
to and reading the second data from the module, 
so Processor means in circuit with the keyboard and 
the interface means, programmed to carry out 
seller/buyer transactions, includes means for cou- 
pling the first and second data to the formatting 
means and for updating the second data stored in 
55 the storage means in accordance with the transac- 
tions. 

The storage means further includes means for 
storing account numbers and for storing corre- 
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sponding account number abbreviation codes, and, 
in accordance with another aspect of the invention! 
the interface means includes means for reading out 
an account number in accordance with its abbrevia- 
tion code keyboard entered by a buyer/seller. 

The module preferably includes an integrated 
circuit therein including a non-volatile memory, 
such as an EEPROM, for storing the first data. The 
module may be in the form of a mechanical key, 
and in that example, the interface means includes a 
key receptacle for enabling a transaction mode of 
operation of the facsimile machine. Electrical con- 
tacts in the receptacle are positioned to electrically 
interconnect with corresponding contacts on the 
module. -- • - 

,n accordance with another important aspect of 
the invention, the interface means may comprise a 
pair of receptacles for receiving two of the mod- 
ules, and a processor means is coupled to the 
receptacles and responsive to the keyboard for 
transferring the first and second data bidirectionally 
between the two modules. The processor means 
preferably further includes means responsive to the 
first and second data for controlling the printing 
means to print a transaction record comprising at 
least a transaction amount, transaction date and 
seller/buyer signatures. 

In accordance with still a further aspect of the 
invention, the processor means is programmed to 
be operative selectively in (a) a local mode for 
transferring the first and second data between the 
two modules in the pair of receptacles within the 
facsimile machine, (b) a remote mode for transfer- 
ring the first and second data between modules 
within receptacles of different facsimile machines 
and (c) an upload mode for transferring the first 
and second data from a module within a receptacle 
of the facsimile machine to a remote computer. 

In accordance with a further aspect of the 
invention, in the remote mode of operation, the 
processor is programmed to carry out transactions 
at predetermined times, e.g., during times of the 
day having reduced telephone line charges or to 
complete the transaction on the next business day. 
Thus, the system additionally includes means for 
storing transaction data corresponding to a desired 
transaction and a desired time of transaction, a 
clock for indicating real time, comparison means 
for comparing real time and the desired transaction 
time and means responsive to the comparison 
means for carrying out the desired transaction at 
the desired time. 

Furthermore, the interface means in accor- 
dance with still another aspect of the invention, 
additionally includes means for reading a request- 
ed transaction amount, keyboard entered by a buy- 
er, and in response, authorizing the transaction 
only if the account balance stored in the storage 



means is larger than the requested transaction. 

The processor preferably is further pro- 
grammed to be operative in an interrogation mode 
wherein data stored in the storage means, cor- 
5 responding to transactions previously completed, 
are printed by the document printer. 

Still other objects and advantages of the 
present intervention will become readily apparent 
to those skilled in this art from the following de- 
70 tailed description, wherein only the preferred em- 
bodiment of the invention are shown and de- 
scribed, simply by way of illustration of the best 
mode contemplated of carrying out the invention. 
As will be realized, the invention is capable of other 
is and different embodiments, and its several details 
are capable of modifications in various obvious 
respects, ail without departing from the invention. 
Accordingly, the drawing and description are to be 
regarded as illustrative in nature, and not as restric- 
20 tive. 

Brief Description of the Drawings 



FIGURE 1 is a perspective view of a transac- 
25 tion system in accordance with one embodiment of 
the invention, having a facsimile machine intercon- 
nected with buyer unit containing, respectively, re- 
ceptacles for seller and buyer modules. 

FIGURE 2 is a perspective view of a transac- 
30 tion system in accordance with another embodi- 
ment of the invention, having a facsimile machine 
interconnected with a buyer/seller unit containing 
receptacles for both seller and buyer modules. 

FIGURE 3 is a view of a transaction system in 
35 accordance with a further embodiment of the inven- 
tion, using a personal computer interfaced with a 
facsimile and buyer/seller transactor unit. 

FIGURE 4 is a diagram of a portable identifica- 
tion module in the form of a card containing an 
40 integrated circuit in accordance with one embodi- 
ment of the invention. 

FIGURE 5 is a diagram of a portable identifica- 
tion module in the form of a mechanical key con- 
taining an integrated circuit in accordance with 
45 another embodiment of the invention. 

FIGURE 6 shows a mechanism for retaining 
the module of FIGURE 4 or 5 into the facsimile 
machine until the module is released in response 
to a keyboard entered user code, 
so FIGURE 7 is a view of the control panel of a 

facsimile used to carry out transactions in accor- 
dance with the invention. 

FIGURE 8 is a system block diagram of the 
invention. 

55 FIGURES 9-1 to 9-6 are a flow chart showing 

programming for operating the processor of FIG- 
URE 8 to carry out transactions off-line, in a local 
mode, between a buyer and a seller. 
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FIGURES 10-1 to 10-10 are a flow chart show- 
ing programming for operating the processor of 
FIGURE 8 to carry out transactions on-iine, in a 
remote mode, between a buyer and a seller. 

FIGURES 1 1-1 to 1 1 -6 are a flow chart showing 
programming for operating the processor of FIG- 
URE 8 to carry out transaction clearing. 

FIGURES 12-1 to 12-7 are a flow chart showing 
programming for operating the processor of FIG- 
URE 8 to provide communications between fac- 
simile machines carrying out financial transactions 
therebetween in CCITT PROCEDURE T3.0 pro- 
tocol. 

Best Mode for Carrying Out the Invention 

Financial transactions are carried out between 
a seller and buyer, in accordance with the inven- 
tion, through transfer of electronic funds data be- 
tween portable modules via a facsimile machine 
which hosts data transfer and prints transaction 
records for the parties. Each portable module may 
be in the form of a card or a mechanical key 
(hereinafter card/key) containing an integrated cir- 
cuit including a non-volatile memory. A preferred 
embodiment of the system comprises a facsimile 
machine having standard features in addition to a 
special keyboard and a receptacle to receive an 
identification/data storage card/key of a seller, to- 
gether with a transactor unit having a keyboard and 
a buyer identification/data storage card/key recep- 
tacle. 

System Overview 

Referring to Fig. 1, a facsimile machine 102 
has an operating panel 104 (see Fig. 7) including a 
keypad 106 having alpha-numeric keys, as well as 
system command keys 108 and function keys 110 
to be described hereinafter. As is conventional, the 
facsimile machine 102 is connected in circuit with a 
telephone set 112, with both the facsimile and 
telephone adapted to be connected to standard 
telephone lines capable of carrying digital signals. 
The facsimile machine further includes a display 
114 for displaying prompts and keyboard entries, 
and a paper receptacle 116 for storing paper upon 
which the facsimile machine will print transaction 
records produced locally or remotely via the tele- 
phone lines. 

Thus far described, except for the particular 
functions controlled by keys 108 and 110, the 
facsimile machine 102 is conventional. However, in 
accordance with one aspect of the invention, the 
facsimile machine 102 is further provided with a 
seller card/key receptacle 118 which is adapted to 
receive a special identification card/key that is car- 
ried by a seller or alternatively is permanently 



retained in the receptacle to enable the seller to 
carry out transactions with local or remote buyers. 
A buyer transactor unit 120 contains a keypad 122 
and a display 124, interfaced with the facsimile 
s machine 102 through a cable 126. The buyer unit 
120 contains a receptacle 128 for receiving an 
identification card/key of the buyer, so that with 
buyer and seller identification cards/keys posi- 
tioned within receptacle 128 of transactor unit 120 
io and receptacle 118 of the facsimile machine 102, 
financial transactions, once approved, can be car- 
ried out using financial and identification data 
stored in the two cards/keys. The data stored in the 
cards/keys thereafter are updated in accordance 
75 with the transactions, and transaction summaries 
are printed by the facsimile machine 102 to be 
provided to the parties. 

The embodiment shown in Fig. 1, with the 
buyer unit 120, electrically interconnected with, but 
20 physically separated from, facsimile machine 102, 
the buyer and seller are advantageously enabled to 
maintain some physical separation from each other 
and, accordingly, privacy. On the other hand, em- 
bodiment 130 shown in Fig. 2 comprises a stan- 
25 dard facsimile machine 132. having substantially no 
modifications provided thereto, that together with a 
buyer/seller transactor unit 134 of this convention is 
interconnected with the facsimile machine by a 
cable 136. Receptacles 138 and 140 within the 
30 buyer/seller unit 134 receive, respectively, buyer 
and seller identification cards/keys B and S. 

Fig. 3 shows another embodiment, in sche- 
matic form, wherein, a buyer/seller transaction unit 
150 is interfaced with a facsimile printer 152 and a 
35 general purpose personal computer 154 that in turn 
is coupled to telephone lines 156 by a facsimile 
machine modem 158. The computer 154, printer 
152 and modem 158 may, for example, be the 
components of a standard personal computer 
40 based facsimile system, such as the "APPLEFAX 
INC." system which is of a type that accepts trans- 
mission from conventional facsimile machines, in 
standard protocol, and communicates in a different 
protocol with other APPLEFAX machines. The sys- 
45 tern switches from the standard protocol to a pro- 
prietary protocol after it has been determined that 
modem 158 is in communication with the modem 
of another APPLEFAX. 

Because the embodiment of Fig. 1 is preferred, 
so a detailed description shall hereinafter be made 
with respect to that embodiment. 

With reference now to Fig. 8, the facsimile 
machine 102 and buyer transactor unit 120 are 
connected in circuit with each other through a 
55 common bus architecture. Accordingly, connected 
on a common bus 159 are a microprocessor 160, 
incorporated within the facsimile machine 102, for 
controlling operation of the facsimile to carry out 
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transactions in the manner to be described in detail 
hereinafter. Also within the facsimile machine 102 
and connected to the bus 159 is a standard fac- 
simile interface 162, similar to the one used in the 
APPLEFAX system, and a modem 164 5 
(corresponding to modem 158 in Fig. 3) for inter- 
connecting the bus with the telephone lines. Fur- 
thermore provided within facsimile 102 and con- 
nected to the bus 159 are a random access mem- 
ory (RAM) 166 and a read only memory (ROM) 10 
168 which provide, respectively, temporary storage 
of data from, and programming to, the micropro- 
cessor 160. Finally, also incorporated within the 
facsimile machine 102 and connected on the bus 
159 are the operator keyboard and display 104, 75 
114. A seller identification card reader 170 pro- 
vided on the bus 159 has the card receptacle 118 
shown in Fig. 1 . The buyer identification card read- 
er 172, shown in Fig. 8, is also connected on the 
bus 159 and is provided within buyer unit 120 of 20 
Fig. 1 . The cooperation among the blocks shown in 
Fig. 8 shall be described in detail hereinafter. 

The apparatus of the invention incorporates two 
identification cards (Figure 4) or "keys" (Figure 5), 
provided to the buyer and seller which function as 25 
vehicles for value exchange, with the value carried 
by each card/key being designated either as a 
credit or debit. To carry out a transaction, the 
buyer and seller position their card/keys B and S 
into corresponding receptacles in the facsimile ma- 30 
chine 102 and buyer unit 120 (hereinafter for sim- 
plicity referred to respectively, as seller unit and 
buyer unit). The buyer and seller are prompted 
through the displays of the buyer and seller units 
to enter their personal identification numbers and 35 
transaction details, and if the transaction is au- 
thorized, i.e., the personal identification numbers 
are correct and the amount of the transaction is 
within the authorization limit of the buyer card/key, 
B value is exchanged between the two card/keys, aq 
debiting the buyer card/key and crediting the seller 
card/key S, and the facsimile machine prints 
records of the transaction for the buyer and the 
seller. 

The system is operable in three modes, viz., a 45 
local mode, a remote mode and an upload or 
clearing mode. In the local mode, transactions are 
carried off-line between a buyer and seller at a 
common point of transaction and the facsimile 
prints transaction records for both the buyer and 50 
seller. In the remote mode, transactions are carried 
out through two facsimile machines between a buy- 
er and seller at different sites and transaction 
records for the buyer and seller are printed by the 
two facsimile machines. In the transaction upload 55 
clearing mode, data accumulated from local and 
remote transactions are transferred to a central 
computer data base for clearing. 



More specifically, in the local mode, the seller 
unit 102 controls the transfer of financial transaction 
data between the seller card/key S inserted in 
seller receptacle 118 in unit 102 and a buyer 
card/key B inserted in receptacle 128 of buyer unit 
120, at a common site. With reference to Fig. 7 
showing a detail of the control panel of 104 of 
seller unit 102, when the LOCAL button in section 
108 of the keyboard is depressed, the seller and 
buyer are prompted to insert their card/keys into 
receptacles 118 and 128. After the card/keys are 
correctly inserted, and the seller and buyer unit 
102, 120 have established communications with the 
respective card/keys, and have confirmed that the 
card/keys are authentic, the buyer and seller are 
prompted at displays 114 and 124 to enter their 
personal identification numbers (PIN). The amount 
of the transaction is then keyboard entered by both 
the buyer and seller, and if the amount entered by 
each is the same and is not greater than the 
credit/debit balance stored in the buyer card/key, 
the buyer card/key is debited, and the seller 
card/key credited, by the amount of the transaction. 

The seller unit 102 prints "mirrored" transac- 
tion records to the buyer and seller, including the 
buyer and seller account numbers, transaction 
date, time, amount and buyer/seller identification. 
In addition, facsimile signatures of the buyer and 
seller are printed to establish a facsimile repre- 
sentation sales contract. 

The buyer/seller account numbers and iden- 
tification data are read from data stored in the 
buyer and seller modules whereas the time and 
date data are generated by a real time clock pro- 
vided in the seller unit 102. Following the transac- 
tion, the buyer and seller are prompted to remove 
their card/keys, and to take one of the two copies 
of the transaction record. After removal of the 
card/keys, the seller unit 102 reverts back to its 
standby condition to be used either as a transac- 
tion unit or standard facsimile machine. 

In the remote mode, a transaction is carried out 
via the telephone lines between a buyer at one 
location, with his card in receptacle 128 of a local 
buyer unit 120, and a seller at a remote location, 
with his card in receptacle 118 of a remote seller 
unit 102. When the necessary transaction data 
have been entered at keyboards 122 and 104 of 
the buyer and seller units 102, 120, at two different 
sites, and with the buyer and seller card/keys B, S 
inserted in their respective receptacles, a request 
for transaction can be carried out immediately, or 
at a later time based upon prior mutual agreement 
between the parties. The following scenario is an 
example of how the system may be used to carry 
out a transaction between remote parties. 

Assume that a seller and buyer agree, during a 
voice conversation by telephone, to a certain pur- 
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chase price for some goods and services, e.g., 
$100. Both parties mutually concur on this amount 
and further agree that the transaction should occur 
at 12:05 A.M. so that the transaction event is dated 
the following day. The seller gives the buyer an 
account number and an authorization number, and 
the buyer reciprocates by giving the seller the 
buyer's account number. If the parties are using 
the telephone handset 112 joined to the seller unit 
1 02 (Fig. 1 ), they can enter the respective account 
numbers, authorization code and the phone num- 
ber of the seller immediately. Both parties com- 
plete the call and hang up. 

Optionally, to avoid the necessity to keyboard 
enter lengthy account numbers, the parties may 
use an ACCOUNT ENTRY key, provided in section 
108 of the keyboard (Fig. 7), which when de- 
pressed, prompts the user for an account number 
and then an authorization code. This code is auto- 
matically generated by implementing an algorithm 
that combines the seller and buyer account num- 
bers, the transaction amount, the date, and the 
serial number of the facsimile machine modem, 
and is always unique. The ACCOUNT CODE key, 
when depressed, takes the currently selected ac- 
count number from a memory queue and prompts 
for the amount. If this key is activated when the 
ACCOUNT ENTRY function is being used, the ac- 
count code thus generated is automatically stored 
in the queue along with the unique buyer account 
number. At any time, the user may display and 
print out an itemized list of the account numbers 
contained in the queue and last entered amount, if 
available, associated with each account number. A 
simple two digit code may be linked to each ac- 
count number for easy recall. To continue with the 
example, the seller, before leaving the office at 
e.g., 5:00 P.M. activates the seller unit 102 into its 
transaction mode by inserting his card/key S into 
receptacle 118. Depending upon which receptacle, 
i.e., seller receptacle 118 or buyer receptacle 128, 
receives a card first, the unit 102 determines which 
procedures to execute. Immediately, the buyer is 
prompted at display 114 to enter his personal iden- 
tification number, followed by his account number 
and an authorization code. If the account number 
and authorization code are already in the queue, 
the RECALL ACCOUNT NUMBER key, in keyboard 
section 108, may be depressed. Activation of this 
key prompts for entry of the two digit account 
queue number, followed by operation by the ven- 
dor of the ENTER key. The display 114 next dis- 
plays the current time and date and prompts the 
seller for entry of an optional time and date after 
which the desired transaction is assumed to have 
clearance to proceed. 

Having selected the buyer account number, 
authorization code and transaction date and time, 



the seller depresses the ENABLE TRANSACTION 
key. The approved transaction is queued and then 
internally assigned a transaction identification num- 
ber. The required transaction will then be carried 
5 out, automatically, at the desired time. 

Meanwhile, the buyer at a remote location en- 
ters his card/key B into receptacle 128. The buyer 
is prompted to enter his personal identification 
number. Assuming that sufficient funds are avail- 
io able from the buyer card/key B, the buyer is prom- 
pted to enter the seller's account number, together 
with the authorization code and transaction amount, 
previously communicated between the parties by 
the telephone. Alternatively, the buyer may depress 
is the RECALL ACCOUNT key to enable the facsimile 
machine to respond to the two digit code repre- 
sentative of the seller's account number position 
within the queue. The buyer recalls the seller's 
account number, authorization code and transaction 
20 amount as previously entered, and depresses the 
ENTER key. The buyer is then prompted for a time 
and date after which the transaction is permitted to 
proceed; otherwise, the transaction is permitted to 
proceed immediately. 
25 The buyer then depresses the ENABLE 

TRANSACTION key, and the transaction number is 
automatically assigned to the one just entered. This 
enables the entry of multiple transactions, useful 
for making multiple payments to different vendors, 
30 automatically, over a preset time span. Similarly, 
operation of the TRANSACTION QUEUE key will 
display and print a list of all current transactions 
with their associated accounts, amounts, dates, 
times and status. The buyer leaves his card/keys in 
35 the receptacle 128, and departs the office. 

At the designated time on the following morn- 
ing, the unit 102 at the site of the buyer automati- 
cally calls the unit 102 at the site of the seller 
which automatically answers. The buyer unit iden- 
40 tifies itself to the seller unit as a facsimile machine 
operating in the transaction mode, to differentiate 
from conventional facsimile operation, and the two 
machines communicate with each other using a 
common protocol. The buyer unit at the buyer's 
45 site interrogates the buyer card/key in receptacle 
128, and reads from the memory of card into its 
own memory the buyer account number, 
credit/debit balance, name, address and telephone 
number of the buyer and the buyer's facsimile 
so signature. 

At the same time, the unit at the seller's site 
reads the same set of information from the seller 
card/key S in receptacle 118, and a packet of 
information containing the seller/buyer account 
55 number, transaction amount, date and time, 
seller/buyer address and telephone number and 
facsimile signature is alternately transferred be- 
tween stations via the telephone lines. This in- 
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formation is transferred in a conventional facsimile 
information field of the HDLC (high level data link 
control) facsimile data frame, consisting of a num- 
ber of subframes, each further subdivided into sev- 
eral fields. 

Immediately after these data have been ex- 
change between units at site of the buyer and 
seller, each verifies that the account number, au- 
thorization code and amount are those previously 
authorized and entered into the transaction queue. 
The buyer unit verifies that the seller account, 
amount and authorization code are those that are 
stored in its queue and similarly, the seller unit 
verifies that the buyer account, authorization num- 
ber, amount and time and date are valid for the 
transaction to proceed. The two units then recipro- 
cally transmit to each other an "approval to store" 
command, upon receiving approval, each facsimile 
machine writes the data into the buyer/seller 
card/key residing in its receptacle. 

Each card/key, whether in the form of a credit 
card as shown in Figure 4, or a mechanical key 
(Fig. 5), contains a microprocessor and non-volatile 
memory integrated circuit. The microprocessor 
verifies that the transaction has been correctly 
stored in the non-volatile memory, and commu- 
nicates this status to the corresponding transactor 
unit. When each unit receives the "transaction data 
stored and valid" response from its inserted 
card/key, the unit transmits a status response to 
the remote unit to certify that the data have been 
successfully stored into the card/key. When each 
unit receives the "transaction stored" status mes- 
sage, a local command is issued by the unit to its 
inserted card to make the transaction record 
"permanent" and hence "close" the transaction 
event 

If all aspects of the operation proceed affir- 
matively, then the card/keys of the buyer and seller 
will contain duplicate images (mirrored images) of 
the transaction data in their non-volatile memories. 
At the close of the transaction, the two transactor 
units print a formatted document containing a 
transaction summary including buyer and seller 
facsimile signatures and, optionally, a facsimile wa- 
termark of the sponsoring institution. 

In the transaction upload or clearing mode of 
operation, data accumulated by each buyer/seller 
card must be transferred to a central computer 
data base for clearing and reconciliation with the 
corresponding transactions stored in the cards of 
the other buyers/sellers, including accrual of inter- 
est and fees. To transport these data to a central 
computer, the contents of each card are read, the 
central computer is called and the data read from 
the card are transferred and the card memory 
thereafter is reset. This mode also enables the 
credit/debit balance in the card to be upgraded or 



reduced at the request of the cardholder or issuing 
financial institution. A typical upload clearing proce- 
dure takes place as follows. 

The UPLOAD/CLEAR key in keyboard section 
5 108 is depressed, and in response, the cardholder 
is prompted to insert his card/key into seller recep- 
tacle 118 or buyer receptacle 128. When the 
card/key has been properly inserted, and the per- 
sonal identification number successfully keyboard 
10 entered, the telephone number of the central com- 
puter is requested if it is not already loaded in the 
memory of the modem of the unit 102. The unit 
102 dials the central computer installation, and 
following establishment of communication, the 
is modem transmits a frame of information identifying 
itself and the account number of the cardholder. 
Transactions are sequentially read from the 
card/key and transmitted, along with frame label- 
ling, error checking and confirmation, to the central 
20 computer. When all transactions have been trans- 
mitted, the central computer acknowledges to en- 
able the memory of the card/key to be reset. The 
card/key confirms to the modem of the unit 102 
that its transaction memory has been successfully 
25 cleared, and the confirmation is received and re- 
transmitted to the central computer which flags the 
transferred data set is complete and valid and logs 
the ending balance contained in the card/key. 

In addition, as another attribute, the cardholder 
30 may at any time interrogate the balance stored in 
his card/key by depressing the TRANSACTION 
DATA key in keyboard section 108. When the 
card/key is inserted into either the seller or buyer 
receptacle 118, 128, and the personal identification 
35 number of the buyer or seller correctly keyboard 
entered, the cardholder is prompted to select a 
review of either the balance or a complete printout 
of all accountant transaction data in the card/key 
memory. If only the "balance" option is selected, 
40 the current account balance is displayed at display 
114 and printed out by the facsimile printer. If the 
"full data review" option is selected, all information 
stored in the card/key is printed along with a se- 
quential and chronological list of credit and debit 
45 transactions. 

With reference to Fig. 4, each buyer/seller 
card/key B, S may be in the form of a credit card 
sized module containing integrated circuitry for 
storing and processing buyer/seller identification 
so and transaction record data. These data are stored 
in a non-volatile memory, such as EEPROM 200, 
incorporated together with a microprocessor 202 
within the body of the card 204/key. The operation 
of the microprocessor 202 is synchronized by a 
55 clock oscillator 206, and is powered, through con- 
ditioning circuitry 208, by a voltage supply in the 
facsimile modem. Communication between the 
microprocessor 202 and the modem is carried out 
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through an asynchronous serial communications in- 
terface 210. All components within the card 
204/key, being conventional, are not described in 
detail. 

Referring to Fig. 5, the buyer/seller card/key B, 5 
S may alternatively be in the form of a mechanical 
key 212 which locks/unlocks the transaction 
unit/facsimile 102, in a conventional manner. How- 
ever, additionally, the key 212 contains integrated 
circuitry 200-210, corresponding to the integrated 10 
circuitry of Fig. 4, coupled through printed circuit 
traces 214 to corresponding traces in a key recep- 
tacle 216 in the facsimile machine 102. Further 
details of the key 212 are given in copending 
application S. N. 07/2 36,612 filed concurrently ts 
herewith, and incorporated herein by reference. 
Accordingly/the key 212 both mechanically locks 
and unlocks the machine and carries transaction 
data in the manner described herein. 

The system is secure from misuse since it 20 
enables transactions only in response to keyboard 
entry of the correct personal identification number 
of each of the buyer and seller, together with the 
previously agreed transaction information. As a fur- 
ther level of security, however, key 212 in Fig. 5 as 25 
well as card 204 in Fig. 4 is preferably provided 
with an aperture 218 for receiving a retaining mem- 
ber 205 which may be in the form of a solenoid 
actuated rod 207, shown in Figure 6, within the 
transactor unit receptacle 118, 128, to retain the 30 
key or card there within unless a predetermined 
release code is keyboard entered. This enables the 
buyer and seller to defer the transaction until a 
later time, without concern that the key or card 
would be removed by an unauthorized user. Other 35 
means of retaining the key or card within the re- 
ceptacle, such as a receptacle cover, could be 
employed as well. 

Operation Sequence Programming *o 



1) Off line mode 

Referring now to Figures 9-1 to 9-6 in the off- 
line mode, the modem of facsimile (seller unit) 102 45 
initially is in an idling, or standby, state, as pro- 
vided at step 500, waiting for an incoming tele- 
phone call, the depression of a function key, a 
scheduled transaction event or the insertion of a 
buyer or seller card/key into its receptacle (step so 
502). The type of function to which the facsimile 
machine 102 is to respond is determined in step 
504, e.g., whether the function requested is defined 
by the depression of the LOCAL key of keyboard 
section 108 (step 506). If not, other functions are 55 
processed at step 508, and if so, buyer (vendee) 
and seller (vendor) functions are independently car- 
ried out by seller unit 102 and buyer unit 120 
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under control by microprocessor circuitry in each. 
Accordingly, the seller sequence is shown in the 
left hand portion of the flow chart and- the buyer 
sequence is shown on the right 

In step 510, the buyer and seller are prompted 
on the respective displays 114, 124 to insert the 
seller and buyer cards/keys S, B in receptacles 
118 and 128. Each unit 102, 120 tests the card/key 
in its receptacle (step 512) to determine that a 
card/key is present, and if so, an encrypted iden- 
tification string is transmitted to the card/key to 
await an acknowledgement string (step 514). Com- 
munication between the card/keys and the units 
102, 120 take place through interface 210 of the 
card/key 204/212 shown in Figures 4 and 5. In step 
516, the card/key transmits a valid acknowledge- 
ment string to the buyer and seller units 102, 120; 
otherwise, an error message in step 518 is gen- 
erated. The modem of unit 102 next generates an 
encrypted request to the seller and buyer 
cards/keys to dump all of this data in the form of 
an encrypted string containing the personal iden- 
tification number, account number, account bal- 
ance, name, address, city, street, zip code, phone 
number and enciphered signature of the cardholder 
(buyer/seller). In response, the unit 102 generates 
an acknowledgement signal or an error signal (step 
522). 

The seller and buyer card/keys next transmit a 
string of the data described above to the unit 102. 
These data are stored in a continuous block of 
memory allocated to the seller and buyer accounts, 
respectively (step 524), and are acknowledged by 
the unit 102 in step 526. The card/key data from 
the seller and buyer are now resident in the mem- 
ory of the unit 102. 

The seller and buyer are prompted to enter- 
their personal identification numbers (step 528), 
and each is permitted three attempts to correctly 
keyboard enter the PIN (step 530). If the PIN is not 
correctly entered by the seller or buyer within three 
attempts (step 532), an error message (step 534) is 
displayed; otherwise, the seller and buyer are both 
prompted to keyboard enter the amount of the 
transaction (step 536). 

The seller and buyer now keyboard enter both 
the amount of the transaction, to which the parties 
have previously agreed (step 538). Meanwhile, if 
the "CLEAR" key is depressed by the seller or 
buyer (step 540), the respective display is cleared. 

After keyboard entries of the transaction* 
amount in the seller and buyer units are complete, 
detected by operation of the ENTER key of the 
seller and buyer units in step 542 (see keyboard 
section 110 of Fig. 7), the buyer unit 120 deter- 
mines whether the transaction amount, keyboard 
entered by the buyer, exceeds the amount remain- 
ing in the buyer card/key (step 544). If so, a 
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"BALANCE WARNING" message is displayed 
(step 546) by the buyer unit, and the buyer is 
prompted to reenter the transaction amount. Other- 
wise, the message "OK TO PROCEED WITH 
TRANSACTION?" is displayed by each unit (step 
548). 

The seller and buyer may cancel the transac- 
tion (step 550) or proceed (step 552). If the "YES" 
key is depressed at each unit, the seller and buyer 
are deemed to have agreed to carry out the trans- 
action, and if the amount keyboard entered by the 
seller and buyer are identical, the transaction is 
carried out (step 554); otherwise, a "NONEQUAL 
AMOUNTS" message is displayed at each unit 
(step 555). ^ — — _ 

To carry out the transaction in progress, the 
unit 102 constructs a transaction record image in 
its random access memory 166 (Fig. 8), applied to 
the memory of processor circuit 202 (Fig. 4) in the 
seller and buyer cards/keys S, B, for archival stor- 
age (step 556). 

The format of the record written into the seller 
and buyer cards/keys is shown in step 558 of the 
flow chart; the date and time are provided by a real 
time clock within the facsimile machine 102, and 
the authorization number is developed by the fac- 
simile machine, transparent to the seller and buyer. 

The unit 102 transmits an encrypted 
"REQUEST TO STORE TRANSACTION" com- 
mand to the seller and buyer cards/keys (step 560) 
and awaits an affirmative response. If no acknowl- 
edgement is received by the unit 102 (step 562), a 
"CARD ERROR" message is displayed by each 
unit (step 564), and diagnostics software indicates 
the source of failure (step 566). if the storage 
confirmation is received by the unit 102, on the 
other hand (step 564), each unit 102, 120 displays 
a "TRANSACTION COMPLETE" message, and the 
buyer and the seller are prompted to remove their 
cards/keys (step 568). 

The data stored in step 558 are now trans- 
ferred to the facsimile printer, to print "mirrored" 
transaction records to the seller and buyer (step 
570). The transaction record contains the identifica- 
tion number of the facsimile machine (seller unit) at 
which the transaction has been carried out, i.e., the 
identification number of its modem, seller and buy- 
er account numbers and the transaction authoriza- 
tion number. Also printed are the amount of the 
transaction and identification of the seller and buy- 
er. Of particular importance, additionally printed are 
facsimile signatures of the seller and buyer, read 
from the read only memories of the seller and 
buyer identification cards/keys, shown at the bot- 
tom of block 572, and forming a facsimile sales 
contract. 

2) Remote Transaction Sequence 



Referring now to the flow chart of Figures 10-1 
to 10-10, a transaction is carried out between a 
seller and buyer at remote locations as follows. The 
seller and buyer units 102 and 120 initially display 
5 a "SELECT FUNCTION WAITING" prompt, in step 
600; any function key, when depressed, is iden- 
tified and the function is executed (step 602). If the 
function detected is the insertion of a seller 
card/key, (step 604), a preliminary test is carried 
io out to determine whether the card/key inserted in 
receptacle 118 is a valid one (step 606); if not, an 
error message is displayed in step 608. Assuming 
that the card/key is determined to be valid, the 
personal identification number and seller account 
15 number and identification data are read from the 
card/key (step 608). This process is carried out by 
the microprocessor circuitry 202 within the 
card/key which transmits an identification string to 
the modem of facsimile machine 102; the string is 
20 formatted as follows: 

PIN, ACCOUNT NUMBER, SUBACCOUNT NUM- 
BER, NAME, ADDRESS. CITY, STATE, ZIP CODE. 

The string of data is stored in a specifically 
allocated location of memory in the modem of unit 
25 102 (step 610), and the seller is prompted to enter 
his personal identification number (step 612). 

If the seller fails to enter the correct personal 
identification number, i.e., the one which corre- 
sponds to the stored personal identification number 
so (step 614), and he does not succeed within three 
attempts, an error message is displayed (step 
616). Otherwise, if there is a match (step 618), the 
seller is prompted to keyboard enter the account 
number of the buyer (step 620) which the seller 
35 has previously obtained. However, optionally, the 
account number together with an authorization 
code and amount can be recalled from a data 
queue if these data were previously entered by the 
seller, e.g., if the current transaction is the same as 
40 a previous one or if the data have otherwise been 
stored. If so, the "RECALL ACCOUNT" key is 
operated (step 622) and the program branches to 
the subroutine shown in Fig. 10-5 wherein at step 
624, the two digit account queue number is key- 
45 board entered in response to a display prompt. 
Following entry of the queue number (step 626), 
the transaction data are displayed (step 628), i.e., 
the queue number together with the account num- 
ber, authorization code and amount, are displayed 
so . as shown in block 628. If during step 626 the 
"PRINT QUEUE" key is depressed, the facsimile 
printer is controlled to print out the queue of ac- 
count numbers, authorization codes and transaction 
amounts (step 630). In each case, program execu- 
55 tion returns to the main program. 

If the "RECALL ACCOUNT" key has not been 
depressed (step 632), or the subroutine of Fig. 10- 
5 has been completed (step 632), and the manual 
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account data entry is complete (step 634), entry of 
the transaction authorization code is prompted 
(step 636). However, the authorization code may 
automatically be generated by microprocessor 160 
(Fig. 8) of unit 102 which algorithm ically combines 
the current account number, amount, date and 
time. Alternatively, the authorization code as well 
as other transactions can be recalled (step 638) by 
operating the "RECALL ACCOUNT" key which car- 
ries, out execution of the subroutine of Fig. 10-5. 

Thereafter, the seller unit displays an "ENTER 
AMOUNT" prompt (step 640), which may be man- 
ually entered by the seller if it is not recalled from 
the account queue. The amount of the transaction 
is keyboard entered by the seller (step 642) if not 
obtained from the transaction queue (step 644), 
and the current time and date, stored in the real 
time clock, are obtained (step 646) if the transac- 
tion is to be carried out immediately; otherwise, the 
seller is prompted to keyboard enter an optional 
date and time in which the transaction shall later be 
carried out (step 648). This facility permits 
"batching" of transactions at times when telephone 
line charges are reduced. In other words, the seller 
can make agreements with buyers to carry out 
transactions, automatically, in the middle of the 
night when telephone charges are reduced; a num- 
ber of transactions are thus completed in succes- 
sion without manual involvement by the seller and 
buyer. 

Deferred transaction along the lines described 
is controlled by the program beginning at step 650 
wherein the date and time of the transaction are 
manually entered by the seller, and the unit 102 
displays an "ENABLE TRANSACTION" prompt 
(Fig. 10-4, step 653). If the transaction is enabled 
by the seller, in step 655, a completed transaction 
data packet is stored in the account queue, to- 
gether with a two-digit account queue code. The 
packet includes the following information: 
ACCOUNT NUMBER, TRANSACTION AMOUNT 
AUTHORIZATION CODE, DATE AND TIME, SELL- 
ER ACCOUNT NUMBER, AMOUNT, and AU- 
THORIZATION CODE. 

A transaction record is printed by the facsimile 
printer, in step 656, as shown, the authorized trans- 
action is carried out at the designated date and 
time (step 658); and the program returns to the 
beginning. 

The operating sequence at the buyer unit 120 
is as follows. The buyer unit initially displays the 
"SELECT FUNCTION WAITING" prompt, in step 
652. The keyboard keys and card/key receptacle 
are scanned to determine whether a function car- 
ried out at the buyer unit 120 is a key depression 
or insertion of a card/key (step 654). If the function 
is determined to be the operation of a key (step 
656), the required function is carried out (step 658); 



if the function is the insertion of a card/key, step 
660, the card/key is tested to determine its validity 
and, if necessary, a "CARD ERROR" message is 
displayed (step 662). 

5 If the card/key is determined to be valid, the 

personal identification number, account number 
and name and address of the buyer are read from . 
the card/key (step 662). This is carried out by the 
card/key microprocessor which transmits an iden- 

70 tification key to the unit 102, formatted as follows: 
PIN. ACCOUNT NUMBER, NAME, ADDRESS, 
CITY, STATE, ZIP CODE 

The string is stored in specifically allocated mem- 
ory locations within the random access memory of 
75 the unit (step 664), and the buyer is prompted to 
enter his personal identification number (step 666). 

If the personal identification number, keyboard 
entered by the buyer, is incorrect following three 
attempts (step 668). an error message is displayed 
20 (step 670) and the buyer is prompted to remove 
his card and retry (step 672). On the other hand, if 
the personal identification number keyboard en- 
tered by the buyer matches the one stored in the 
memory of the buyer card/key (step 670), the buy- 
25 er is prompted to keyboard enter the account num- 
ber of the seller. Here it is assumed that the buyer 
has obtained the account number of the seller by 
previous agreement; however, the account number 
0 f t h e seller can be obtained from data previously 
30 stored in an account queue within the random 
access memory of the buyer card/key B, step 672, 
in the same manner as described previously with 
respect to the operating sequence of the seller. 
When the account data are entered, either 
35 manually or by access to the account queue (step 
674), the authorization code is requested and key- 
board entered (step 676) or obtained from the 
queue. The amount of the transaction next is re- 
quested and keyboard entered (step 678), or re- 
40 called from the account queue,. 

The amount of the transaction now is com- 
pared with the account balance stored in the 
card/key of the seller, in step 680, and if the 
transaction amount requested exceeds the account 
45 balance, a warning message is displayed at the 
buyer unit, the transaction will not be authorized 
and no authorization code is assigned. 

If t on the other hand, the transaction is ap- 
proved (step 682), i.e., the amount of the transac- 
50 tion exceeds the account balance stored in the 
card/key of the buyer, the buyer is prompted to 
reenter the transaction amount (step 684). Assum- 
ing approval, the buyer next is prompted to enter 
the telephone number of the seller, unless that 
55 information is previously stored in the account 
queue (step 686). Upon completion, indicated by 
operation of the "ENTER" key of the buyer unit 
keyboard, the current date and time are displayed 
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(step 688). The buyer is now given an option to 
proceed immediately with the transaction, or to 
keyboard enter a subsequent date and time to 
complete the transaction; this permits batching of 
buyer transactions at times when telephone line 
charges are reduced, as described earlier. 

If the buyer elects to carry out the transaction 
immediately (step 690), the transaction is flagged 
for immediate execution (step 692); otherwise, the 
buyer is prompted to enter the date and time of the 
proposed transaction (step 694), and following en- 
try (step 696), the buyer is prompted to approve 
the transaction in step 698. 

Assuming that the transaction is enabled by 
the buyer, operating the "YES " key (step 700), the 
buyer unit generates a data packet which includes 
the following information: 

SELLER ACCOUNT NUMBER, TRANSACTION 
AMOUNT, AUTHORIZATION CODE, DATE AND 
TIME. 

Again, the seller account number, amount, authori- 
zation code and seller identification number may 
be recalled from a data queue, if previously stored. 

A transaction record is now printed by the 
facsimile printer (step 702), in the format shown, 
and the transaction is added to the transaction 
queue (step 704), and assigned a two-digit queue 
number. The transaction then is carried out be- 
tween the seller and buyer immediately or at the 
designated time, and the program recycles to 
"start". 

3) Communication Protocol 



Now described is the sequence of operation 
which is carried out between the buyer and seller 
units which establish communication therebetween, 
automatically, to effect a transaction at the des- 
ignated time. Thus, referring to the flow chart of 
Figures 11-1 to 11-5, assume that the seller and 
buyer have agreed to carry out a transaction in the 
amount of one thousand dollars at 12:01 A.M. on 
July 29, 1988. The left-hand side of the flow chart 
refers to the operating sequence of the seller unit 
and card/key, the right-hand side refers to the 
operating sequence of the buyer unit and card/key. 

In step 706. the buyer unit is placed on-line, 
and if a dial tone is detected, the telephone num- 
ber of the seller unit is dialed. If the telephone of 
the seller unit rings, the seller unit answers (step 
708) and communication between the seller and 
buyer unit is established using CCITT procedure 
T.30 protocol, carried out conventionally between 
facsimile machines in group 2 format; alternatively, 
other formats and protocols, such as group 3 for- 
mat specified in CCITT recommendation T.4 can 
be utilized. In this regard, group 2 format, which 
allows image transmission at a vertical resolution of 



100 lines per inch and a rate of six lines per 
second, typically requires approximately three min- 
utes to transmit an eleven inch long page. Group 3 
format, on the other hand, allows image transmis- 
5 sion at a vertical resolution of either 100 or 200 
lines per inch. To decrease transmission time, this 
format utilizes a digital compression technique 
which uses a combination of run-length and encod- 
ing and Huffman coding. The group 3 format allows 
w transmission of the digital representation of an im- 
age at one of four data rates, 9600, 7200, 4800 or 
2400 bits per second, selected to accommodate 
the quality of the telephone connection and to 
match the capabilities of the transmitter and re- 
75 ceiver facsimile units. Group 3 format allows trans- 
mission of a typical page of text in less than a 
minute when the 9600 bits per second rate is used. 

Thus, the seller unit 102 transmits to the buyer 
unit a digital identification signal (DIS) as outlined 
20 in procedure T3.0, containing information about the 
facsimile machine, such as vertical and horizontal 
scan line times (step 710). Meanwhile, the buyer 
unit detects the DIS signal and determines its com- 
patibility (step 712), i.e., the buyer unit confirms 
25 that it is in communication with a facsimile machine 
that is able to carry out a transaction (step 714). If 
the buyer unit determines that it has contacted a 
facsimile machine that cannot carry out financial 
transactions, communication is aborted (step 716); 
30 otherwise, it transmits a digital command signal 
(DCS) to the seller unit to confirm that it is com- 
patible therewith (step 718), which signal is de- 
tected by the seller unit 102 (step 720). Meanwhile, 
if the seller unit has determined that the machine 
35 calling is a facsimile machine that is not capable of 
carrying out transactions, the seller unit aborts 
communication (step 722); otherwise, the mode of 
communication is selected, depending upon tele- 
phone line conditions, etc. (step 724). 
40 The buyer unit next transmits a 

phasing/training signal (step 726) to the buyer unit, 
to verify the communication line, which signal is 
received by the seller unit (step 728). 

The seller unit then transmits a confirmation to 
45 receive (CFR) signal to the buyer unit (step 730), 
which signal is detected (step 732), and in re- 
sponse, the buyer unit interrogates the card/key of 
the buyer to receive data stored therein (step 734). 
At the same time, the seller unit interrogates the 
so contents of the card/key of the seller (step 736), 
and an image of the seller card/key data is read 
into the memory of the facsimile modem. 

The buyer unit transmits to the seller unit the 
string of information shown in block 736, which is 
55 received by the seller unit in step 738. This is 
carried out by the buyer unit reading from the 
buyer card/key an image of the data contained 
therein as the card is first inserted into its recepta- 
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cle. The end of message, transmitted by the buyer 
unit, is detected by the seller unit at step 740, and 
in response, a message confirmation signal (MCF), 
in step 742, is transmitted back to the buyer unit 
which has transmitted an end of message signal 
thereto (step 744). The seller unit checks the seller 
account number, authorization code and amount 
which is stored in its transaction queue (step 746) 
to determine validity (step 748). If there is no 
match, an "INVALID DATA SIGNAL" message is 
transmitted to the buyer unit (step 750) and the 
transaction is flagged as aborted due to invalid 
data in the account, amount, or authorization code 
field (step 752) and the program returns to the 
beginning thereof. 

Assuming that the transaction requested is de- 
termined to be valid, on the other hand, in step 
748, the seller unit transmits an image string of its 
transaction data to the seller unit (step 752), whose 
digital identification signal (DIS) is detected by the 
buyer unit (step 754). The buyer unit transmits a 
digital transmit command to the seller unit (step 
756), requesting transmission of transaction data 
from the seller unit. This request is detected by the 
seller unit, in step 758. which in response, trans- 
mits a digital command signal back to the seller 
unit (step 760), all in accordance with CCITT pro- 
cedures. 

The buyer unit detects the digital command 
signal, in step 760, and selects its mode of opera- 
tion (step 762). Training/phasing signals are ex- 
changed between the buyer and seller units (step 
764); the buyer unit transmits a confirmation to 
receive signal, in step 766, which signal is detected 
by the seller unit (step 768) which, in response, 
transmits the string of data shown in block 770, 
followed by an end of message bit (step 772), to 
the buyer unit 

The buyer unit-receives the information, in step 
774, and, in response, transmits a message con- 
firmation signal (step 776) back to the seller unit. 
The message confirmation signal is detected by 
the seller unit while the vendor account number, 
authorization code and amount received by the 
buyer unit are compared to the corresponding data 
stored in the transaction queue, if there is not a 
match, determined in step 778, an invalid data 
signal is transmitted back to the* seller unit (step 
780) and the transaction is aborted (step 782). 

If the transaction matches, on the other hand, 
the transaction data are recorded in the random 
access memory of the buyer card/key (step 784), 
and if these 'data are successfully written to the 
card/key, as determined in step 786, an End of 
Procedure signal is transmitted to the seller unit 
(step 788); otherwise, an error signal is transmitted 
back to the seller unit in step 790, which signal is 
detected, in step 792. The seller unit, in response, 



aborts communication (step 794), and displays a 
failure message (step 796), to the seller. Otherwise, 
the end of procedure message transmitted by the 
buyer unit is detected in step 798. 

5 Meanwhile, if the buyer unit has not success- 

fully transferred the record data to its card/key, 
communication by the buyer unit is aborted (step 
800), and a transaction failure message, together 
with a report of the cause, is printed by the fac- 

io simile machine at the buyer site (step 802). 

Assuming that the buyer unit has successfully 
transferred the transaction record to its card/key, 
the seller unit attempts to write the transaction 
record to the card/key of the seller (step 804). If 

75 unsuccessful, disconnect signal (DCN) is transmit- 
ted to the buyer unit (step 806), the communication 
is aborted (step 808), and a failure message, to- 
gether with cause of failure, is printed by the fac- 
simile machine at the seller site (step 810). Assum- 

20 ing, however, that the transaction record is written 
successfully to the card/key of the seller (step 
812), the seller unit transmits a message confirma- 
tion signal to the buyer unit (step 814). and the 
transaction is logged as completed so that the 

25 card/key of the seller is instructed to store the 
transaction as a permanent record (step 816) as 
the communication with the buyer unit is termi- 
nated (step 818), and the transaction record is 
printed by the facsimile machine at seller site (step 

30 820). 

Meanwhile, at the buyer site, a disconnect sig- 
nal has been received because the seller unit did 
not successfully store the transaction record into 
the card/key of the seller (step 822), the buyer unit 
35 terminates communication with the seller unit (step 
824), and the transaction record is deleted (step 
826), and an indication of the failure is printed (step 
828). 

On the other hand, assuming that the seller 
40 unit has successfully stored the transaction in the 
card/key of the seller, the buyer unit detects the 
message confirmation signal transmitted to it by 
the seller unit (step 830), communications are ter- 
minated (step 832), and the card/key of the buyer 
45 is instructed to log the transaction as complete 
(step 834). Finally, the transaction record is printed 
(step 836). 

The transaction records printed at the seller 
and buyer sites are mirror images of each other, as 
so shown in blocks 838 and 840, with the buyer and 
seller facsimile signatures obtained from the read 
only memories of the buyer and seller of card/keys, 
included in the transaction records to form fac- 
simile sales contracts. 

55 

4) Upload/Clearing Mode 

Now described with reference to Figures 12-1 
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to 12-7 is the operating sequence of the unit 102 in 
the transaction clearing mode of operation, wherein 
transactions carried out by each facsimile seller 
unit 102 are reported to a central computer for 
reconciliation. Thus, assuming initially that the dis- 5 
play of unit 102 is in the "SELECT FUNCTION 
WAITING" prompt (step 900), the program deter- 
mines whether the function requested is an opera- 
tion of the "UPLOAD/CLEAR" key of the keyboard 
(step 902). If so, the card/key holder is prompted to 70 
insert his card/key in the seller receptacle 118 
(step 904), and the card/key is detected (step 906). 
The seller unit 102 now interrogates the card/key to 
determine validity (step 908). If the card/key is 
determined to be valid, "by transmitting a proper 75 
acknowledgement in response to an encrypted 
identifier string transmitted by the facsimile ma- 
chine (step 910), the facsimile machine requests 
the card/key to dump its account holder information 
(step 912); otherwise, if the card/key is determined 20 
to be invalid, an error message is displayed (step 
914). 

The card/key transmits a string of data to the 
random access memory of the facsimile machine, 
having the following format: 25 
PIN, ACCOUNT NUMBER, ACCOUNT NAME, AD- 
DRESS, CITY, STATE, ZIP CODE, TELEPHONE 
NUMBER and SIGNATURE IMAGE. 
If the data request is acknowledged by the 
card/key, in step 916, the card/key transmits these 30 
data to the random access memory of the facsimile 
102, stored therein within a continuous block al- 
located to the holder of the card/key (step 918). 
Upon completion, determined in step 920, the 
card/key holder is prompted to enter his personal 35 
identification number (step 922). 

If the personal identification number, keyboard 
entered by the cardholder, matches, the personal 
identification number stored in the card (step 924), 
the seller unit displays the message "NOW READ- 40 
ING CARD/KEY TRANSACTION MEMORY" (step 
926); if the personal identification number keyboard 
entry by the cardholder does not match the num- 
bers stored in the card, and error message is 
displayed (step 928). 45 

A transaction read request is now sent to the 
card/key, and in response, the card/key transmits 
each transaction, together with error checking and 
data validation, until all the transactions have been 
transferred from the card to the random access 50 
memory of the facsimile machine (step 928). If the 
request is not acknowledged by the card/key, there 
is a defect in the card, and an error message is 
displayed (step 930); otherwise, transactions are 
read from the card in the format shown in step 932. 55 

In step 934, an acknowledgement is sent to the 
card/key that the record was correctly received. If, 
on the other hand, an error is detected, retransmis- 



sion is requested several times. If the record can- 
not be correctly received error-free from the 
card/key, an error message is displayed, and the 
process is aborted (see also step 936). 

If all records are correctly transferred from the 
card/key to the buyer unit 102 (step 938), an ac- 
knowledgement is displayed, in step 940. The sell- 
er unit now places a telephone call to the central 
computer (step 944). 

When the central computer is called, if a dial 
tone is not detected within a preset period of time, 
or the carrier signal from the remote computer 
modem is not detected, then a time out abort 
sequence is carried out and an_ appropriate .error 
message is both displayed and printed. 

When communication with the central com- 
puter is established, the identification number of 
seller unit 102 is transmitted to the central com- 
puter (step 946), and the seller unit transmits an 
upload request If the central computer does not 
acknowledge the upload request, communication 
between the seller unit and the central computer is 
aborted (step 948). If the upload request is ac- 
knowledged, on the other hand, transaction records 
stored in the random access memory of the seller 
unit are uploaded, as shown in step 950). 

if there is no acknowledgement from the cen- 
tral computer of the uploaded data, communication 
is aborted (step 952); otherwise, transaction 
records continue to be transmitted to the central 
computer (step 954). This is carried out by the 
transmission, following each record, of an acknowl- 
edge, negative acknowledge (ACK/NAK) sequence, 
with attempted multiple transmission. If there is a 
data transfer failure, an abort sequence will be 
executed. 

Upon completion of the transmission of trans- 
action records, in step 956, the central computer 
transmits a command to clear the transaction mem- 
ory of the seller unit, in step 958. Upon clearance 
of the memory of the card/key resident in the seller 
unit (step 960), and encrypted command string is 
transmitted by the central computer to the card/key 
to clear the memory thereof (step 962). The 
card/key then transmits an acknowledgement to the 
central computer that its memory has been cleared 
(step 964); otherwise, an error message is dis- 
played (step 966) at the seller unit. If the memory 
is clear, the card/key sends a "MEMORY ALL 
CLEAR CODE" to the remote computer, and waits 
for acknowledgement (step 966). If the central com- 
puter acknowledges, in step 968, the card/key is 
authorized to finalize the transaction clear (step 
970); otherwise, resetting of the card/key memory 
is aborted in step 972. 

Finally, an End of Procedure code is transmit- 
ted by the seller unit to the remote computer (step 
972) and communication is terminated. A confirma- 
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tion message is then displayed at the buyer unit. 
The cardholder now removes the card. 

Eventually, the cardholder will receive an item- 
ized statement from the authorizing institution, with 
the transaction details, together with account bal- 
ance itemized. 

5) Conclusion 



There has thus been described a system for 
providing electronic funds transfer between porta- 
ble modules of a seller and buyer via at least one 
facsimile machine. The system is operative selec- 
tively in (1) an off-line mode wherein funds data are 
transferred between modules at a common fac- 
simile machine, (2) an on-line mode wherein funds 
data are transferred between modules at different 
transaction sites over the telephone lines via two 
facsimile machines and (3) an upload or clearing 
mode wherein funds data are transferred to a cen- 
tral computer for reconciliation, in the transaction 
modes (1 ) and (2), facsimile signatures of the buy- 
er and seller obtained from the modules, together 
with transaction data obtained from the modules 
and keyboard entered, are printed by the facsimile 
machine printer to form transaction records. Micro- 
processor circuitry is programmed to control the 
operation of the system, including carrying out 
particular functions such as deferring the time of 
transaction, updating account records and security. 

In this disclosure, there is shown and de- 
scribed only the preferred embodiment of the in- 
vention, but, as aforementioned, it is to be under- 
stood that the invention is capable of use in various 
other combinations and environments and is ca- 
pable of changes or modifications within the scope 
of the inventive concept as expressed herein. 

Claims 

1. An electronic funds transfer system for carry- 
ing out financial transactions between local or 
remote users, comprising : 

a portable identification module (B,S,204,212) 
having an information storage means (200) 
therein, said information storage means storing 
first data corresponding at least to a 
vendor/vendee identification number, transac- 
tion amounts, transaction times, an account 
balance and a vendor/vendee signature ; 

a facsimile machine (102) comprising first 
means including a document printer for print- 
ing data on a recording medium, input means 
including a keyboard (104) for receiving sec- 
ond data manually entered thereon, said fac- 
simile machine further including means (160) 



for formatting said first and second data, 
means (1 64) for transmitting formatted data via 
a communication medium to other ones of said 
facsimile machine, said formatted data includ- 

s ing text and graphics data, means (164) for 

receiving formatted data incoming on said 
communication medium from said other ones 
of said facsimile machine and means for print- 
ing (162) on said recording medium informa- 

io tion including vendor/vendee signature corre- 

sponding to said formatted data ; 

interface means (118,120) incorporated with 
said facsimile machine (102) for receiving said 
15 identification module (B,S,204,212), said inter- 

face means including means for writing 
(104,122) said second data to and reading 
(114,124) said second data from said module ; 
and 

20 

processor means (160) in circuit with said key- 
board (104) and said interface means (120) for 
carrying out vendor/vendee transactions, said 
processor means (159,160) including means 
25 (1 59) for coupling said first and second data to 

said formatting means (160) and for updating 
said second data stored in said storage means 
(200) in accordance with said transactions. 

30 2. The system of claim 1, wherein said module 
(8,8,204,212) includes an integrated circuit 
(200) therein for storing said first data. 

3- The system of claim 1 or 2, wherein said 
35 module is in the form of a mechanical key 

(212) and said interface means includes a key 
receptacle for enabling a transaction mode of 
operation of said facsimile machine (102). 

40 4. The system of claim 2, wherein said integrated 
circuit includes an EEPROM (200). 

5. The system of claim 1 , wherein said interface 
means comprises a receptacle (118,128) for 
45 receiving said module, electrical contacts in 

said receptacle positioned to electrically inter- 
connect with corresponding contacts on said 
module (B,S,204). 

so 6. The system of claim 5, wherein said interface 
means comprises a pair of receptacles 
(118,128) for receiving two of said modules 
(B,S). 

55 7. The system of claim 6, wherein said interface 
means includes processor means (160) coup- 
led to said receptacles (118,128) and respon- 
sive to said keyboard (104) for transferring said 
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first and second data bidirectionally between 
said two modules (B,S,204,212). 

8. The system of claim 7, wherein said processor 
means (160) further includes means respon- 5 
sive to said first and second data for control- 
ling said printing means to print a transaction 
record comprising at least a transaction 
amount, transaction data and vendor/vendee 
signatures. 70 

9. The system of claim 7, wherein said processor 
means (160) is programmed to be operative 
selectively in (a) a local mode for transferring 

said first and second data between said two 15 
modules (B,S,204,212) in said pair of recepta- 
cles (118,128) within said facsimile machine 
(102), (b) a remote mode for transferring said 
first and second data between modules 
(B,S,204,212) within receptacles (118,128) of 20 
different facsimile machines and (c) an upload 
mode for transferring said first and second 
data from a module (B.S.204,212) within a re- 
ceptacle (110,128) of said facsimile machine 
(102) to a remote computer. 2 s 

10. The system of claim 1, including means (166) 
for storing transaction data corresponding to a 
desired transaction and a desired time of 
transaction, a clock for indicating real time, 30 
comparison means (160) for comparing real 
time and the desired transaction time and 
means (160) responsive to said comparison 
means for carrying out the desired transaction 

at the desired time. 35 

11- The system of claim 1, wherein said commu- 
nication medium comprises telephone lines. 

12. The system of claim 11, wherein said transmit- 40 
ting means includes an asynchronous serial 
communications interface (210) coupled to said 
telephone lines. 

13. The system of claim 1, wherein said interface 45 
means further includes means (160) for read- 
ing a requested transaction amount keyboard 
entered by a vendee, and in response, au- 
thorizing said transaction only if the account 
balance stored in said storage means is larger 50 
than said requested transaction. 

14. The system of claim 9, wherein said processor 
(160) is further programmed to be operative in 

an interrogation mode wherein data stored in 55 
said storage means (200), corresponding to 
transactions previously completed, are printed 
by said document printer. 



15. The system of claim 1, including means (160) 
for reducing the account balance stored in said 
storage means by the amount of a completed 
transaction. 

16. The system of claim 1, wherein said storage 
means (200) further includes means for storing 
account numbers and for storing correspond- 
ing account number abbreviation codes, said 
interface means including means for reading 
out an account number in accordance with its 
abbreviation code keyboard entered by a 
vendor/vendee. 



17. For a facsimile machine (102) comprising a 
document reader for reading text and graphics 
data from a document provided thereto, a doc- 
ument printer for printing data on a recording 
medium, a keyboard (104) for receiving and 
encoding first data manually entered thereon, 
means (160) for formatting data received from 
said document reader and said keyboard, 
means (164) for transmitting said formatted 
data via a communication medium to other 
facsimile machines, means (164) for receiving 
formatted data incoming on said communica- 
tion medium from said other facsimile ma- 
chines and printer means for printing on said 
recording medium text and graphics informa- 
tion, an improvement for carrying out 
vendor/vendee transactions comprising : 

receiving means (118,120) incorporated with 
said facsimile machine (102) for receiving a 
vendor/vendee identification module 
(B,S,204,212), said receiving means having 
means (104,122) for writing data to and read- 
ing (114,124) data including a vendor/vendee 
signature from said module ; and processor 
means (160) in circuit with said keyboard (104) 
and said receiving means (118,120) for carry- 
ing out vendor/vendee transactions, comprising 
means (160) for determining whether a trans- 
action requested via the keyboard is an au- 
thorized transaction, means (160) for coupling 
data including said vendor/vendee signature 
carried by said identification module 
(B,S,204,212) to said formatting means (160), 
means (160) for updating said data carried by 
said identification module in accordance with 
said authorized transaction, means (160) for 
generating transaction data associated with 
said authorized transaction and means (160) 
for transmitting said transaction data to another 
facsimile machine. 

18. The improvement of claim 17, wherein said 
receiving means comprises a receptacle 
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(118,128) in said facsimile machine (102) for 
receiving said identification module (B,S,204). 

19. The improvement of claim 18, wherein said 
receiving means furhter includes a receptacle 
configurated to receive an identification module 
in the form of a mechanical key (212). 

20. The improvement of claim 19, including retain- 
ing means (207) within said receptacle 
(118,128) for capturing said key (212) and 
means responsive to keyboard entered data for 
releasing said retaining means (207). 

21. The improvement of claim 17, including a 
clock means for real time signal, and said 
processor means (160) including means re- 
sponsive to said real time signal and keyboard 
entered data for carrying out said authorized 
transaction at a predetermined real time. 

22. The improvement of claim 17, wherein said 
processor means (160) includes means for 
storing a queue of authorized transactions and 
for carrying out said queue of authorized trans- 
actions, one authorized transaction at a time. 

23. The improvement of claim 17, wherein said 
processor means (160) includes means re- 
sponsive to said .identification module for stor- 
ing vendor/vendee account numbers, transac- 
tion authorization codes and, in an encoded 
form, said vendor/vendee signature. 

24. The improvement of claim 23, including 
modem means (164) for transmitting formatted 
data on said communication medium and 
wherein said processor means (160) further 
includes means for encoding said 
vendor/vendee signature into serial format data 
for transmission by said modem (164). 

25. The improvement of claim 23, wherein said 
receiving means comprises a card reader 
(118,128). 

26. The improvement of claim 17, wherein said 
receiving means comprises first and second 
receptacles (118,128) for receiving respectively 
first and second identification modules 
(B.S.204). 

27. The improvement of claim 17, wherein said 
receiving means further includes means (120) 
external to said facsimile machine (102) for 
receiving a second identification module (B), 
and wherein said processor means (159,160) 
includes means (159) for establishing bidirec- 
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tiional communications between said identifica- 
tion modules. 

28. The improvement of claim 26, wherein said 
processor means (160) is programmed to be 
operative selectively in (a) a local mode for 
transferring data between said two modules 
(B,S,204,212) in said first and second recepta- 
cles (118,128) within said facsimile machine 
(102), (b) a remote mode for transferring data 
between modules (B,S,204,21 2) within recepta- 
cles (118,128) of different facsimile machines 
and (c) an upload mode for transferring data 
from a module (B,S,204,212) within a recepta- 
cle (110,128) of said facsimile machine (102) 
to a remote computer. 

29. The improvement of claim 17, wherein said 
processor means (160) is programmed to con- 
trol said printer means to print a transaction 
record in accordance with transaction data ob- 
tained from vendor and vendee identification 
modules (B,S ,204,21 2), said transaction record 
including vendor and vendee signatures ob- 
tained from said vendor/vendee identification 
modules (B,S,204,212). 

30. The improvement of claim 19, wherein said 
mechanical key (212) contains an integrated 
circuit (200-210) and said processor means 
(160) includes means for transferring data 
bidirectionally with respect to said integrated 
circuit (200-210). 



17 



BNSDOCID: <EP 043B930A1_I_> 



EP 0 438 930 A1 



ioo 




FIG. 3 



BNSDOCID: <EP 0438930A1_I_> 



18 



EP 0 438 930 A1 




19 

BNSDOCID: <EP 0438930A1_I_> 



EP 0 438 930 A1 



+-5 VOLTS 



TRANSMIT 



RECEIVE 



RTS 



CTS 



GRNO 



FIG. 4 



POWER CONDITIONING AND CONTROL 



ASYNCHRON- 
OUS SERIAL 
COMMUNICA- 
TIONS 
INTERFACE 



CLOCK 
OSCILLATOR 




2I0 



206 



208 



SMART CARD/KEY 
SINGLE-CHIP 
MICROPROCESSOR 
WITH ON-BOARD 
RAM, EEPROM ANO 
PROGRAM ROM 



202 



EXTERNAL EEPROM 
FOR SECURITY COOES 
ACCOUNT ** AND 
TRANSACTION 
MEMORY 



200 



204 



TO |1 




202 



2 14 



212 



' u 



216 



FIG. 5 



200-210 



BNSDOCID: <EP_ 0438930A1_I_> 



20 



EP 0 438 930 A1 



\ 



I© _GD 
'© S © B © ® 
! ©-© s © © 



© s ©'© ® 



p 
li 

<UJ 

o 



o 
o 



o 



-I 3 
< o 
o o 



o 

< O 



O 



-3 
ceo: 



o 



to 



UJh- 



o 



OK 



O 



CO UJ 
< UJ 



O 

-JUJ 

a. -J 



o 



UJ 



\ 



X 

< 

>- 
UJ 

o 



\ 



\ 



a: 

UJ 



UJ 



o 
-j 
o 

X 



0~ 



UJ 

o 
< 



X 
CO 

< 

-J 




CD 



BNSDOCID: <EP 0438930A1 J_> 



21 



EP 0 438 930 A1 



FIG. 8 



I64 





TELEPHONE 




LINE 




INTERFACE 




ANO 




FAX MODEM 





FAX UNIT 
INTERFACE 










RAM 




MEMORY 




V 






-r 



1 72 



BUYER 
KEY 
READER 



SELLER 

KEY 
READER 



MONEYFAX 
JOHN SMITH 



7 



/MONEYFAX 7 
/ BILL JONES/ 



I70 




OPERATOR 
KEYBOARD 

AND 
DISPLAY 



I04.II4 



BNSDOCID: <EP 0438930A1 I > 22 



EP 0 438 930 A1 




GET FUNCTION 
AND DETERMINE TYPE 



VENDOR PROCESS 
(PROMPTS DISPLAYED ON VENDOR KEYPAD ) 



1 




PROCESS OTHER 
FUNCTIONS 



—r— 

508 



VENDEE PROCESS 



PROMPT VENDOR TO 
INSERT SMART CARD/KEY 

"INSERT CARD/KEY" 



(PROMPTS DISPLAYED ON VENDEE KEYPAD 

♦ 



TEST FOR 
CARD/KEY INSERTED 
INTO RECEPTACLE 




510 



PROMPT VENOEE TO 
INSERT SMART CARD/ KEY 

"INSERT CARD/ KEY" 



512 



TEST FOR 

CARD/ KEY INSERTED 
INTO RECEPTACLE 




FIG. 9-1 




BNSDOCID: <EP 0438930A1_I_> 



23 



EP 0 438 930 A1 



FIG. 3-2 




SEND ENCRYPTED MONEYFAX 
10 STRING TO SMART 
CARD/KEY AND WAIT FOR 
ACKNOWLEDGE STRING 



514 




SEND ENCRYPT MONEYFAX 
ID STRING TO SMART 
CARD/KEY AND WAIT FOR 
ACKNOWLEDGE STRING 



NO 



OUTPUT A VENDOR 

CARO/KEY 
ERROR MESSAGE 

~ 3 



CARD/KEY 
TRANSMITS A VALItT 
ACKNOWLEDGE STRING 
TO VENDOR PORT OF 
MONEYFAX 

YES 



516 



MAIN 



518 



MONEYFAX TRANSMITS AN 
ENCRYPTEO REQUEST TO THE 
VENDOR CARD TO DUMP ALL 
OF ITS ACCOUNT HOLDER 
INFORMATION 



520 




CARD/KEY 
'TRANSMITS A VALID* 
ACKNOWLEDGE STRING 
TO MONEYFAX 
MODEN 
? 



OUTPUT A 
"CARD/KEY" 
"ERROR MESSAGE) 



MAIN 



MONEYFAX TRANSMITS TO THE 
CARD/ KEY AN ENCRYPTED 
REQUEST CODE FOR THE 
CARD/KEY TO TRANSMIT TO THE 
MONEYFAX A BLOCK OF DATA 





ERROR 



NO 



MONEYFAX 

DATA REQUEST 

ACKNOWLEDGED, 
? 



522 



YES 



MONEYFAX 

DATA REQUEST 

ACKNOWLEDGED. 
? 



NO 



ERROR 



CARD/KEY TRANSMITS STRING 
OF REQUESTED DATA 



CARD/ KEY TRANSMITS STRING 
OF REQUESTED DATA 



NO 



DATA 
RECEIVED 
JY MONEYFAX 
? 



526 



DATA 
RECEIVED 
3Y MONEYFAX. 
? 

'yes 



NO 



K.1 



BNSDOCID: <EP 0438930A1J > 



24 



EP 0 438 930 A1 




FIG. 9-3 



BNSDOCID: <EP 0438930A1_L> 



25 



EP 0 438 930 A1 



OUTPUT 
TRAN- 
SACTION* 
"CANCELED" 
MESSA GE 



( 



MAIN 




COMPARE VENDOR 
AND VENDEE AMOUNTS 
FOR EQUIVALENCE 



555 



WARN 
VENDOR OF 
NONEQUAL 
AMOUNTS 

(amount) 





OUTPUT TRANSACTION 
PROCEED CONFIRMATION 
PROMPT 
"OK TO PROCEEO" 
WITH TRANSACTION ?"/ 




COMPARE VENDEE 
AND VENOOR AMOUNTS 
FOR EQUIVALENCE 



OUTPUT 
"TRANS- 
SACTIOM" 
CANCELED" 
MESSAGE 

(main) 



PROCEED WITH TRANSACTION 



/OUTPUT TO DISPLAY, 
/"TRANSACTION IN 
PROGRESS" 




554 



OUTPUT TO DISPLAY) 
'TRANSACTION IN 
PROGRESS" 



1 555 

WARN 
VENDEE OF 
NONEQUAL 
AMOUNTS 

(^amount) 



CONSTRUCT A 
TRANSACTION RECORD 
IMAGE FOR THE VENDOR 




556 



I 



CONSTRUCT A 
TRANSACTION RECORD 
IMAGE FOR THE VENDEE 




FIG. 9-4 



BNSDOCID:<EP 0438930A1J > 



26 



EP 0 438 930 A1 



or 




as 

CO CJ> 

I — as 

<=» 3E 

CXI cO 

o 

a 



CD 



CO 



n 



2= 










» — 














CO 




















»— 














* 


CC 




<=> 
























Q£ 




<=> 




£=> 






<=> 


UJ 










4£ 



n 



to 



U 



<=> 
cr: 



UJ Lo 



CO 









UJ 

CO 






UJ 












3 




O 








o- 






tr 


CO 




c_> 


-*£ 

CP 


RE 




-t 

cO 


OS 
-«£ 


UJ 


UJ 
1 — 


«*c 

as 
i — 


CO 




a. 




UJ 


as 




UJ 






as 


as 

h— 


ion; 


u- 


UJ cO 




as 














<s=» 
I — 






cO 












cO 
2E 


UJ 

o 


«eC 




-a: 


UJ 






as 


Of 






»— 


3 


CP 






CO 

m 



uol 








UJ 


UJ 

cO 








<=> 








a- 






s=» 


CO 
UJ 






as 








OS 


















CO 




UJ 






Of 


> 




-«£ 


«£ 




UJ 


as 






h— 




CO 




O- 






as 


>- 


UJ 


OS 




as 






u- 


C-> 


as 




u. 

-cC 


UJ 


cO 


UJ 








or 








O 




1 — 


<s» 


u- 




cO 




WAIT 


CO 


UJ 






or 






-«*: 


UJ 






Of 


as 


<=> 




1 — 


« 


o 





to 

l 

C 




BNSDOCID: <EP 0438930A1_I_> 



27 



EP 0 438 930 A1 



FIG. 9-5(b) 



MfaV 



564 



NO ^"^ACKNOWLEDGE 
REQUEST TO STORE 
TRANSACTION. 
•> 

'yes 



562 



TRANSMIT VENDOR 
RECORD TO CARD /KEY AND 
WAIT FOR CONFIRMATION 




TRANSMIT VENOEE 
RECORD TO CARD/KEY AND 
WAIT FOR CONFIRMATION 



OUTPUT 
"CARD ERROR" 
MASSAGE 



INDICATE 
NATURE 
OF ERROR 



c 



I 



MAIN 




OUTPUT 
CARD ERROR 
MASSAGE 




INDICATE 
NATURE 
OF ERROR 

3 



MAIN 



3 



'OUTPUT TO FAX PRINTER 
A TRANSACTION RECEIPT 
CONTAINING TRANSACTION 
OETAIl-TO VENDOR 



570 



'OUTPUT TO FAX PRINTER 
A TRANSACTION RECEIPT 
CONTAINING TRANSACTION, 
OETAIL-TO VENDEE 





BNSDOCID: <EP 



_0438930A1 I > 



28 



EP 0 438 930 A1 



© 



SIMPLE VENOOR TRANSACTION 
RECORD PRINTED OUT ON FAX PRINTER: 



MONEYFAX TRANSACTION RECORD 
-LOCAL MODE- 

MONEYFAX 1.0. *: 112052 

VENDOR ACCT * 75275047262204 AMOUNT 

AUTHORIZATION * 678152 $500.00 

VENDEE ACCT » 534 95047262204 

VENDOR: WILLIAM W.MEE 

1001 NW 62ND ST #212 
FORT LAUDERDALE, FL 33309 

TEL * (305) 771-0555 

TIME: 2:00P.M. DATE: 6/30/88 

VENDEE: WILLIAM BENTON 
2888 NE 25TH CT 
FORT LAUDERDALE, FL 33305 



TEL * (305) 561-9637 

VENDOR SIGNATURE: titit*-. V. 7tUe, 

VENDEE SIGNATURE: g&fcflfe 2&~<5» 




FIG. 9S 



29 



EP 0 438 930 A1 



FIG. 10-1 




MAIN 



DISPLAY 
"SELECT FUNCTION" 
"WAITING" 
PROMPT ON MONEYFAX DISPLAY 




600 



NO 




: unctioit 

REQUEST 
? 

YES 



GET FUNCTION AND 
DETERMINE TYPE 



OUTPUT 
'CARD ERROR" 
MESSAGE 



(602) 

UNCTION^ 
OTHER THAN THE 
INSERTION OF A VENDOR 
CARO/KEY 

? 



PROCESS 
OTHER 
FUNCTIONS 



608 



(604) 



IS A^ 
"VALID CARD/KEY" 
DETECTED IN VENDOR 
RECEPTACLE 
? 

'YES 



606 



READ PIN FROM CARD ALSO READ ACCOUNT n 
NAME AND ADDRESS OF VENDOR 



608 



STORE DATE IN 
MONEYFAX MEMORY 



6I0 



OUTPUT 
PIN ERROR 
MESSAGE 



PROMPT THE VENDOR TO 
"ENTER VENDOR PIN" / — 6I2 

I 



6I6 



NO 



/ INPUT PIN BM 
.6)8 




BNSDOCID: <EP 0438930A1 I > 



30 



EP 0 438 930 A1 




FIG. 10-2 



REQUEST ENTRY OF 
ACCOUNT * 



/"ENTER VENO 


EE ACCOUNT" i 












ENTER DATA FROM 






VENDOR 


KEYPAO 





620 



NO 



RECALL 
ACCOUNT" KEY 
OEPRESSEO 
? 

'no 

"ACCOUNT 
DATA ENTRY 
COMPLETE 

'YES 



YES 



622 



632 



634 



REQUEST ENTRY OF 
AUTHORIZATION CODE 
'"ENTER AUTHORIZATION 
"CODE" 




31 



EP 0 438 930 A1 



FIG. 10-3 




NON OUTPUT CURRENT DATE AND TIME 
EG. 7/28/88 - 17: 01:26 
REQUEST ENTRY OF AN OPTIONAL OATE AND 
TIME AT WHICH THE TRANSACTION MAY PROCCEED 





648 



PROMPT FOR ENTRY OF 
DATE ANO TIME OF TRANSACTION/ 
ENTER DATE" 
MM/DD/88 



1 



FLAG TRANSACTION AS REAOY 
TO PROCEED IMMEDIATELY 
FOLLOWING FINAL CLEARANCE 



I 



650 



RETRIEVE VALID 
DATE OIGITS 




BNSDOCID: <EP 0438930A1J_> 



32 



EP 0 438 930 A1 




FIG. 10-4 



RETRIEVE VALID 
TIME DIGITS 




NO 




OUTPUT PROMPT 
ENABLE TRANSACTION* 




PRINT A CONFIRMING RECORO 
ON MONEYFAX PRINTER: 

TRANSACTION ENABLEO-VENOOR 

tt ACCOUNTWENDEE) AMOUNT AUTHOR CODE 
01 534950472 6 220400 SI000.00 629178 
OATE TIME - AUTHORIZED 
7/28/88 17: 01 



OATE TIME 
7/29/88 00:01 



- TO PROCEEO 




TRNSACTION IS AOOEO TO THE TRANSACTION 
QUEUE ANO ASSIGNED A TWO DIGIT QUEUE * 
AT DESIGNATED TIME MONEYFAX MODEM - 
WILL INITIATE THE TRANSACTION 




659 



33 



EP 0 438 930 A1 



FIG. IO-5 



RECALL 
ACCOUNT 



REQUEST ENTRY OF 2 DIGIT 
ACCOUNT QUEUE # 
"ENTER ACCOUNT 
QUEUE * _ _" 



624 



INPUT THE DIGITS 
0-90 




ACCOUNT 
ACCOUNT 



LISTING 



01- 62597818532466 

02- 161749187265 

03- 827913541992 

04- 638541746591 

05- 34125781158 
06 - 53495047262204 



AUTHOR AMOUNT 
CODE 

271159 112.00 

552183 555.47 

498732 821.60 

21218 7 202.76 

241351 954.23 

629178 1000.001 



1 



DISPLAY ACCOUNT INFORMATION 
QUEUE ACCOUNT AUTHORIZATION AMOUNT 
* * CODE 




630 



06 5 349504726224 629178 



(date/time) 



siooo.ooi 

628 



BNSDOCID: <EP 0438930A1_I_> 



34 



EP 0 438 930 A1 



DISPLAY ON MONEYFAX DISPLAY/ 

"SELECT FUNCTION" 652 
"WAITING" PROMPT I 



NO 




654 



GET FUNCTION AND 
DETERMINE TYPE 



662 
J— 



TUNCW 
OTHER THAN THE 
INSERTION OF A 
VENDEE CARD/KEY, 
? 



656 



YES 



658 
J— 



PROCESS OTHER 
FUNCTIONS 



OUTPUT 
'CARD ERROR" 
MESSAGE 



IS A \ 660 
VALID CARD/KEY 
DETECTED IN THE VENDEE 
^CARD RECEPTACLE 



672 



READ FROM CARD PIN ACCOUNT * 
NAME AND AOORESS OF VENOEE 



662 



'PROMPT VENDEE 
TO REMOVE 
CA RD I RETRY / 

~T~ 

OUTPUT 
"PIN ERROR" 
MESSAGE 



STORE VENOEE DATA IN 
MONEYFAX MEMORY 



670 



I 




PROMPT VENDEE TO 
ENTER VENOEE PIN 

* 



9- 



664 



666 



INPUT PIN FROM 
REMOTE VENDEE KEYPAD 




7 1M 



FIG. 10-6 



BNSDOCID: <EP 0438930A1_L> 



35 



EP 0 438 930 A1 




ENTER OATA FROM 
VENDEE KEYPAO 




BNSDOCID: <EP 0438930A1_I_> 



36 



EP 0 438 930 A1 



FIG. 10-8 




ENTER THE AMOUNT DIGITS 
ON VENOEE KEYPAD 




BNSDOCID: <EP 0438930A1J_> 



37 



EP 0 438 930 A1 




NON OUTPUT CURRENT DATE ANO TIME / 
REQUEST ENTRY OF AN OPTIONAL 7 
OATE ANO TIME AT WHICH / 
TRANSACTION MAY PROCEED / 



FIG. 10-9 



688 



TRANSACT 
DATA OATE AND 
TIME OTHER THAN 
JHE PRESENT 

YES 



690 



NO 



PROMPT FOR ENTRY OF OATEj 
"ENTER OATE" 
MM/OD/88 



694 




1 



692 



FLAG TRANSACTION AS 
READY TO PROCEED 

IMMEDIATELY FOLLOWING 
FINAL CLEARANCE 



PROMPT FOR ENTRY OF TIME 
'ENTER TIME' 
HH:MM 



696 



RETRIEVE VALID TIME 
DIGITS 




38 



EP 0 438 930 Al 



FIG. IO-IO 



OUTPUT PROMPT 
'ENABLE TRANSACTION 
? 





PRINT A CONFIRMING RECORD ON 
MONEYFAX PRINTER AS FOLLOWS: 

TRANSACTION ENABLEQ- VENDEE 

ACCOUNT (VENDOR) AMOUNT AUTHOR CODE 
75275047262204 % 1000.00 629178 



DATE TIME 
7/28/88 17:01 



- AUTHORIZED 



OATE 
7/29/88 



TIME - 
00:01 



TO PROCEED 




TRANSACTION IS AOOED TO TRANSACTION 
QUEUE AND ASSIGNED A QUEUE # 
AT DESIGNATED TIME AND DATE. 
MONEYFAX MODEM OF VENDEE WILL CALL 
MONEYFAX OF VENDOR AND 
INITIATE TRANSACTION 



704 




MAIN 



39 



EP 0 438 930 A1 



( 



SELLER 





OlAL NUMBER 








TRANSMIT 
TO 


CALLING 
NE 



ANSWER CALL 



TRANSMIT CALLED 
STATION I/O TONE 



7I0 



TRANSMIT 
OIS SIGNAL 




OIS OETECTEO 
CAPABILITIES OF VENDOR 
MONEYFAX DETERMINED - 



7I2 



0 



"V" 



FIG. ihl 



> 



40 



St 

EP 0 438 930 A1 



FIG. 1 1 -2(a) 



0 



E.t 



714 



VENDOR 
OEVICE IS A 
VALID MONEYFAX, 

? 



NO 



720 

•r- — i 



DETECT DCS FROM I 
VENDEE I 



NO 



722 
4- 



VENOEE 
OEVICE IS A 
MONEYFAX 
? 



DISCONNECT 
LINE A NO 
ABORT TRANSACTION 

I 



718 

4 



DISCONNECT 
LINE AND 
ABORT TRANSACTION 

I 



i 



(main) 



TRANSMIT DCS 
(DIGITAL COMMAND SIGNAL) 
TO VENOOR: IDENTIFYING 
CAPABILITIES OF VENOEE 
DEVICE AND IDENTIFYING 
IT AS A MONEYFAX 



724 



(main) 



SELECT MODE j 



728 



I ^ 

RECEIVE PHASING/TRAINING| 



I 



TRANSMIT CFR 
(CONFIRMATION TO 
RECEIVE) 



-730 



726 




TRANSMIT PHASING/ TRAINING 
SIGNAL 


732 

, \ 1 





DETECT CFR 



734 



A 



INTERROGATE VENDEE 
CARD/ KEY ANO READ .DATA FROM IT 





BNSDOCID: <EP 0438930A1_I_> 



41 



EP 0 438 930 A1 




BNSDOCID: <EP 043B930A1 f > ^ 



EP 0 438 930 A1 




SENO AN MCF 
(MESSAGE CONFIRMATION^ 

I 



CHECK. VENDEE ACCOUNT *, 
AUTHORIZATION CODE 
AND AMOUNT AGAINST 
VDHAT IS STORED IN THE 
TRANSACTION QUEUE 




TRANSMIT INVALID 
OATA SIGNAL 
TO VENDEE 



7 

750 



FLAG 
TRANSACTION 
AS ABORTED 





YES 


TRANSMIT DiS| 







.752 



(main) 



1 



758 



■ 4 

DETECT OTC'l 



I 



TRANSMIT DCS 
(OIGITAL COMMANO SIGNAL) 



742 



746 



760 



] 



TRANSMIT 
PHASING/TRAINING 



OETECT CFR ~f ~ 768 




756 



SEND AN EOM 
(END, OF MESSAGE) 



T 

744 



754 

DETECT DIS 
(DIGITAL IDENTIFICATION 
SIGNAL) 

I 



TRANSMIT DTC 
(DIGITAL TRANSMIT COMMAND) 


760 










OETECT DCS 





I 



762 
764 



SELECT MODE 

— I — 



TRAINING/PHASING 



766 



TRANSMIT CFR 




FIG. 11-3 



BNSDOCID: <EP 0438930A1_I_> 



43 



EP 0 438 930 A1 




BNSDOCID: <EP 0438930A1 I > 44 



EP 0 438 930 A1 



FIG. II -4(b) 




794 
X 




HANG UP LINE AND 
FLAG TRANSACTION 
AS ABORTED 



OUTPUT FAILURE 

MESSAGE 

TO PRINTER ^ 
j^-Y 

796 



778. 



OETECT EOP 



798 

■ ^ , 

FROM VENDEE} 



ACCOUNT * 
AUTHOR. CODE I 
AMOUNT VALID 
? 





YES 




780- 


784 




, i i 




ATTEMPT 


TO WRITE 


TRANSACTION RECORD 


TO THE SMART 


CARO/KEY 







TRANSMIT INVALID 
- OATA SIGNAL TO 
VENDOR 



FLAG 
TRANSACTION 
AS ABORTED 

1 





SEND 


EOP 


(ENOOF PROCEDURE) 


J 




788 





BNSDOCID: <EP 0438930A1_L> 



45 



EP 0 438 930 A1 




804 



ATTEMPT TO WRITE 
TRANSACTION RECORO TO 
SMART CARD/ KEY OF 
VENDOR 



TRANSMIT OCN 
(DISCONNECT) 

\ 



806 



© © 




HANG UP LINE 
AND FLA6 
TRANSACTION AS ABORTED 



I 



808 



PRINT MESSAGE ON FAX 
PRINTER INDICATING 
THAT TRANSACTION 
FAILED OUE TO CARD/KEY 
WRITE FAILURE 




800 
J— 



HANG UP LINE AND 
FLAG TRANSACTION AS 
ABORTEO DUE TO 
VENDEE CARD WRITE 
FAILURE 



TRANSMIT AN 
MCF (MESSAGE CONFIRMED) 



(PRINT OUT A MESSAGE 
REPORTING THE 
TRANSACTION FAILURE] 
AND CAUSE _y 



8I6 



LOG TRANSACTION 
AS COMPLETE 
TELL SMART CARD/KEY 
TO STORE TRANSACTION 
AS A PERMANENT RECORD 



I 




830 



NO 



HANG UP LINE ANO FLAG 
TRANSACTION AS ABORTEO 
DUE TO VENDOR CARD/KEY 
WRITE FAILURE 



DETECT MCF 



HANG UP LINE +" 818 

'PRINT TRANSACTION RECORD, 
TO FAX PRINTER. FLAG 
TRANSACTION QUEUE THAT 
TRANSACTION IS COMPLETE 
AND NOTE DATE J TIME 
OF COMPLETE. 



I 



824 



DELETE STORED - 
TRANSACTION RECORD 



HANG U P, LINE 
■*\ — 

832 



834 



I 



826 



PINT OUT A 
'MESSAGE REPORTED 
FAILURE AND 
THE CAUSE 



•828 



TELL SMART CARD/KEY 
TO LOG STORED 
TRANSACTION AS COMPLETE 

■/ ' I ANO PERMANENT 

820 \ 

PRINT TRANSACTION RECORD TO FAX 
PRINTER. FLAG TRANSACTION QUEUE 
THAT TRANSACTION IS COMPLETE 
AND NOTE OATE AND TIME 
OF COMPLETE 




836 



© 




FIG. 11-5 



BNSDOCID:<EP 0438930A1 1 > 



46 



EP 0 438 930 A1 




838 



SAMPLE VENDOR TRANSACTION 
RECORD PRINT OUT 

MONEYFAX TRANSACTION RECORD 
VENOOR -10: 112052 
VENDEE - 10: 556021 
VENOOR ACCT. * 75275047262204 AMOUNT 
AUTHORIZATION * 629178 SIOOO.OO 

VENDEE ACCT. * 53495047262204 

VENDEE: WILLIAM M. BENTON 
2888 N.E. 25TH CT 
FORT LAUDERDALE, FL 33305 

TEL. * (305) 561-9637 

TIME: 12:03 A.M. DATE: 7/29/88 

SIGN AT URE; VJ<W*- 07). 



MAIN 




1 



840 



SAMPLE VENOEE TRANSACTION 
RECORO PRINT OUT 

MONEYFAX TRANSACTION RECORO 

VENDEE - ID: 556021 
VENDOR - ID: 112052 
VENDEE ACCT. * 53495047262204 AMOUNT 
AUTHORIZATION * 629178 $1000.00 
VENDOR ACCT. * 75275047262204 
VENOOR: Will AM W. MEE 

1001 N.W. 62N0 ST. *2I2 
FORT LAUDEROALE, FL 33305 
TEL: * (305) 771-0555 
TIME: 12:03 A.M. DATE: 7/29/88 
SIGNATURE: iJM^ U. 

(^MAIN^) 

"v — " '■ 



FIG. 11-6 



47 



EP 0 438 930 A1 




GET FUNCTION AND 
DETERMINE TYPE 



GO ANO PROCESS 
OTHER 
FUNCTIONS 



•S 902 
FUNCTION A 

DEPRESSION OF THE 
"UPLOAD/CLEAR" 
KEY 
? 

fYES 

PROMPT CARD/KEY 
HOLOER 
"INSERT CARD/KEY IN 
RECEPTACLE MARKED VENDOR* , 



FIG. 12-1 




906 



SEND ENCRYPTED MONEYFAX IDENTIFIER 
STRING TO SMART CARD/KEY AND MART 
FOR ACKNOWLEDGE STRING 



908 




48 



4 



EP 0 438 930 A1 



FIG. 12-2 



OUTPUT 
CARD/KEY 
ERROR MESSAGE 





MONEYFAX TRANSMITS 
ENCRYPTED REQUEST TO THE 
SMART CARD/ KEY TO DUMP 
ITS ACCOUNT HOLDER 
INFORMATION. 



\ 
912 





CARO/KEY TRANSMITS A STRING 
OF REQUESTED DATA 
MONEYFAX. DATA IS STORED IN MONEYFAX 




918 



NO 




PROMPT CARD/KEY 

HOLDER "f-922 
'ENTER CARD/KEY PIN" 




BNSDOCID: <EP 0438930A1_I_> 



49 



EP 0 438 930 A1 




FIG. 12-3 



OUTPUT TO DISPLAY 
"NON REAOING CARD/KEY 
TRANSAC TION MEMORY" 

I 



OUTPUT 
"PIN ERROR 
MESSAGE 



926 



SEND TRANSACTION READ REQUEST TO 
SMART CARD/KEY. UPON RECEIVING REQUEST 
SMART CARD /KEY WILL TRANSMIT EACH OF 
THE TRANSACTIONS WITH ERROR CHECKING 
AND OATA VALIDATION UNTIL ALL OF THE ~ 
TRANSACTION HAVE BEEN TRANSFERRED 
TO MONEYFAX MEMORY. 




(^manT) 



} 



928 



928 



f REAO A 
V RECORD J 



932- 



(LBS 



READ A TRANSACTION RECORO FROM THE CARD. 
EACH TRANSACTION RECORO IS FORMATTED 
AS A STRING AS FOLLOWS: 



TRANSACTION * 



ACCOUNT * 



AMOUNT 



AUTHOR. 
COOE 



— MONEYFAX 10 


ADORESS 


CITY, STATE, ZIP 




PHONE # 


TRANSACTION TYPE 


CHECKSUM 


CRC | 




(MSB) 



BNSDOCID: <EP 0438930A1_I_> 



50 



EP 0 438 930 A1 




SEND AN ACKNOWLEDGE TO THE 
CARD/KEY THAT THE RECORD WAS 
CORRECTLY RECEIVED. IF AN ERROR 
WAS DETECTED REQUEST RETRANSMISSION 
SEVERAL TIMES 



934 




—7 

936 



OUTPUT 
"CARD ERROR" 
"FAULTY TRANSACTION 

MEMORY" 
ALSO PRINT OUT ERROR 

MESSAGE ON THE 
/ FAX PRINTER 



(j)ONE) 




OUTPUT TO DISPLAY 
"CARO/KEY MEMORY 
SUCCESSFULLY READ" 
"NON CALLING CENTRAL 
COMPUTER" 



940 



I 



PLACE PHONE LINE IS OFF/ HOOK STATE 




FIG. 12-4 



DIAL NUMBER 
I 




BNSDOCID: <EP _043B930A1_I_> 



51 



EP 0 438 930 A1 



FIG. 12-5 




TRANSMIT MONEYFAX 
10 FOLLOWED BY AN 
UPLOAD REQUEST CODE 



946 




( ABORT y 



NO 



UPLOAD 
REQUEST 
ACKNOWLEDGED 
? 



ABORT PROCEDURE 
AND DISCONNECT LINE 



I 



OUTPUT 
CANNOT COMPLETE 
TRANSACTION UPLOAD 
MESSAGE 



( ^MAIN^) 



TRANSMIT A RECORD CONTAINING 
THE ACCOUNT HOLDER INFORMATION: 



ACCOUNT * 



BALANCE 



* OF TRANSACTIONS 



CRC 



WAIT FOR 
ACKNOWLEDGE 





52 



V 



EP 0 438 930 A1 



FIG. 12-6 




COMPUTER NOV/ SENDS 
OK TO CLEAR CARD/KEY 
TRANSACTION MEMORY 
COMMAND TO MONEYFAX 



958 




SEND AN ENCRYPTED COMMAND 
STRING TO CARD/KEY TELLING 
IT TO RESET IT'S TRANSACTION 
COUNT TO ZERO EFFECTIVELY 
CLEARING ITS MEMORY 



--962 



NO ACKNOWLEDGE 



966 



OUTPUT 
CARD ERROR 



7 



(W) 



972 



IF CARD/ KEY 
DOESN'T RECEIVE 
FINALIZE COMMAND 
IT ABORTS THE CLEAR 



I 



WAIT FOR AN* 
ACKNOWLEDGE FROM 
THE CARD/KEY THAT THE 
.MEMORY IS NOW CLEAR, 
? 

>ES 



SEND CARD/KEY 
MEMORY ALL CLEAR - 
CODE TO REMOTE COMPUTER 
WAIT FOR ACKNOWLEDGE 



966 



C ABORT ) 



ACKNOWLEDGE 
TO ALL CLEAR 
COMMAND RECEIVED 
? 

Tyes 



TELL CARO/KEY TO FINALIZE 
TRANSACTION CLEAR 




970 



-0 



BNSDOCID: <EP 0438930A1 J_> 



53 



EP 0 438 930 A1 



FIG. 1 2-7 




SENO END OF PROCEDURE 
CODE TO REMOTE COMPUTER 
AND DISCONNECT THE LINE. 
(HANGUP PHONE) 



'972 



OUTPUT 
"TRANSACTION UPLOAD 
SUCCESSFULLY COMPLETED" 
MESSAGE 
"PLEASE REMOVE CARD/KEY" 




BNSDOCID: <EP 0438930A1_I_> 



54 




European Patent 
Office 



EUROPEAN SEARCH REPORT 



Application Number 



EP 90 40 0202 




BNSDOCID: <EP. 



.0438930A1_l_> 



